register.fxtm.info/switchers/
200 OK 18 kB URL User Request GET HTTP/1.1 register.fxtm.info/switchers/
IP
Certificate IssuerLet's Encrypt
Subjectregister.fxtm.info
FingerprintA2:D4:07:D9:B7:D6:27:E3:CF:CC:46:05:87:10:EB:BA:AC:2D:3C:AD
ValidityWed, 31 May 2023 13:16:39 GMT - Tue, 29 Aug 2023 13:16:38 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 52f628ab2dbc9de9d8d294ddf1a2bb80
c4d8e108cd13dfd248556fdf9f8eacbe89be6063
7cdaa4114fc5c62744c22b099613886f1c5b46d6953613f5d1d149a5ce300e41
GET /switchers/ HTTP/1.1
Host: register.fxtm.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
date: Sun, 06 Aug 2023 15:06:18 GMT
content-type: text/html; charset=utf-8
content-length: 18427
set-cookie: ubvs=1b34664a-636c-4b65-851d-e4924b46917d; Max-Age=15552000; Path=/; SameSite=Lax
ubvt=v2%7C1b34664a-636c-4b65-851d-e4924b46917d%7Ce99e679d-5417-4190-b4ce-cd61fd09315e%3Aa%3Asingle; Max-Age=259200; Domain=fxtm.info; Path=/; SameSite=Lax
ubpv=a%2Ce99e679d-5417-4190-b4ce-cd61fd09315e; Max-Age=15897600; Path=/switchers/; SameSite=Lax
content-location: https://register.fxtm.info/switchers/
etag: "a:1b34664a636c4b65851de4924b46917d"
link: <https://register.fxtm.info/switchers/>; rel="canonical"
x-unbounce-pageid: e99e679d-5417-4190-b4ce-cd61fd09315e
x-unbounce-variant: a
x-unbounce-visitorid: 1b34664a-636c-4b65-851d-e4924b46917d
content-encoding: gzip
x-proxy-backend: page-server
builder-assets.unbounce.com/published-css/main-7b78720.z.css
200 OK 2.9 kB URL GET HTTP/2 builder-assets.unbounce.com/published-css/main-7b78720.z.css
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerAmazon
Subject*.unbounce.com
FingerprintE5:D6:5A:AB:8C:1B:70:75:D3:63:1E:35:7A:F5:A4:02:53:7F:60:A2
ValidityTue, 21 Feb 2023 00:00:00 GMT - Wed, 07 Feb 2024 23:59:59 GMT
File type ASCII text, with very long lines (15017)
Hash cd2292597f3290f1644e4575eb2f106f
aaf356b422538222cab2790e7bdb5975dbf63d3c
7b787207f29ffd5672ab91b95f681b387b4d6433081cc8b47070f1d564827863
GET /published-css/main-7b78720.z.css HTTP/1.1
Host: builder-assets.unbounce.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
content-length: 2902
date: Mon, 17 Jul 2023 12:03:19 GMT
last-modified: Tue, 11 Jul 2023 16:18:48 GMT
etag: "99b89a3d5f7bab4f89aad694ef70a6d8"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
content-encoding: gzip
x-amz-version-id: fMGT9YqOCj6GvXj65o03BPFmMJDaNxvc
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Mb5JVJwcGyCfPvSfGvlp22NcvYeFxeOptoii--LW12up_PZaskbs7Q==
age: 1738981
X-Firefox-Spdy: h2
my.forextime.com/widget.php?product=trading&type=new
200 OK 4.1 kB URL GET HTTP/2 my.forextime.com/widget.php?product=trading&type=new
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerCentralNic Luxembourg Sàrl
Subject*.forextime.com
FingerprintD0:E4:5A:3F:40:96:1E:77:78:0E:76:1C:F2:44:08:B4:CD:B4:2F:91
ValidityFri, 18 Nov 2022 00:00:00 GMT - Sun, 10 Dec 2023 23:59:59 GMT
File type HTML document, ASCII text, with very long lines (12292)
Hash 9c896ed0fec0857b30a67854f19210be
aba5351bd038a87da43b050610bec87b8ffa27c7
149c67d8d178f502ea81b0c2f561181d0971bbed65ed78e3f4f077197d633ced
GET /widget.php?product=trading&type=new HTTP/1.1
Host: my.forextime.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Aug 2023 15:06:19 GMT
content-type: application/javascript
content-length: 4117
cache-control: no-cache
pragma: no-cache
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000
server: cloudflare
cf-ray: 7f282eddda9d1c16-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash 52de7c7c09156445af7745b867bd70a6
21d640eb286e108f56a37b840aa16db80ca18daf
27b85dee0d72c3b80ac7e9f292453594aea5849ff0978770c90f8569cdba4e5f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 06 Aug 2023 15:06:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googleoptimize.com/optimize.js?id=OPT-WNLJ72F
200 OK 48 kB URL GET HTTP/2 www.googleoptimize.com/optimize.js?id=OPT-WNLJ72F
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintDD:70:56:93:2B:32:FA:EA:25:D4:3B:17:50:BC:E0:4A:6A:BA:DB:8B
ValidityMon, 10 Jul 2023 08:16:15 GMT - Mon, 02 Oct 2023 08:16:14 GMT
File type ASCII text, with very long lines (2271)
Hash f2ad4f53fbc43f7d49b9b59102fd36f6
55b1bdc6e90bc5b5ba6eacd2724edea664e112ff
60283e45fc3c83f05d38f0c5137e7e1865098a2a0561f71c2d8260dac35f2366
GET /optimize.js?id=OPT-WNLJ72F HTTP/1.1
Host: www.googleoptimize.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 06 Aug 2023 15:06:19 GMT
expires: Sun, 06 Aug 2023 15:06:19 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 48501
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash 52de7c7c09156445af7745b867bd70a6
21d640eb286e108f56a37b840aa16db80ca18daf
27b85dee0d72c3b80ac7e9f292453594aea5849ff0978770c90f8569cdba4e5f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 06 Aug 2023 15:06:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1d4/xa4oELGS3_0
471 B URL ocsp.pki.goog/s/gts1d4/xa4oELGS3_0
IP
Hash 92a6d5cd00e7065da0bacc46bdc22685
756c87b785d36b5799ae9a88001044fa87c7f84b
c5f8a56732a3b40062e3ce4f9d3e22634ac577d7c4bf5a05cd3c43c80de24616
POST /s/gts1d4/xa4oELGS3_0 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 06 Aug 2023 15:06:19 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
register.fxtm.info/track?referer=
404 Not Found 47 B URL GET HTTP/1.1 register.fxtm.info/track?referer=
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerLet's Encrypt
Subjectregister.fxtm.info
FingerprintA2:D4:07:D9:B7:D6:27:E3:CF:CC:46:05:87:10:EB:BA:AC:2D:3C:AD
ValidityWed, 31 May 2023 13:16:39 GMT - Tue, 29 Aug 2023 13:16:38 GMT
File type ASCII text, with no line terminators
Hash f9ae9006943e3a67b95ca4c6c733b6d4
9f9e7a7e2602d29e4df8c38df6277ab37fb1b079
cd8b79123a843eee64985a23257e2fab80ef2c4c08427b688ea979671fc1c457
GET /track?referer= HTTP/1.1
Host: register.fxtm.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/switchers/
Cookie: ubvs=1b34664a-636c-4b65-851d-e4924b46917d; ubvt=v2%7C1b34664a-636c-4b65-851d-e4924b46917d%7Ce99e679d-5417-4190-b4ce-cd61fd09315e%3Aa%3Asingle
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
date: Sun, 06 Aug 2023 15:06:19 GMT
content-type: text/plain; charset=utf-8
content-length: 47
x-proxy-backend: page-server
builder-assets.unbounce.com/published-js/main.bundle-85a7477.z.js
200 OK 34 kB URL GET HTTP/2 builder-assets.unbounce.com/published-js/main.bundle-85a7477.z.js
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerAmazon
Subject*.unbounce.com
FingerprintE5:D6:5A:AB:8C:1B:70:75:D3:63:1E:35:7A:F5:A4:02:53:7F:60:A2
ValidityTue, 21 Feb 2023 00:00:00 GMT - Wed, 07 Feb 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 1fc134009855f7cff4f7a651d7590c0b
85244b16361e7ce32e85c445f711ad2f78492405
85a747734bc4cf88e192f853e80b6bd25a7976dcea76af998f41c88ed64f6b86
GET /published-js/main.bundle-85a7477.z.js HTTP/1.1
Host: builder-assets.unbounce.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 33747
date: Sat, 15 Jul 2023 00:11:21 GMT
last-modified: Mon, 10 Jul 2023 18:38:42 GMT
etag: "6ce35e88e5299f623189adcaf266b9b3"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
content-encoding: gzip
x-amz-version-id: TsqXEulHpCIWQfLEsYTo7.zRFGF4af5e
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: mPEYxDNRi8b3RsUXW5zSY9vtBV4TPJ2OUDtvqYWddF15T7x5W9iBOw==
age: 1954499
X-Firefox-Spdy: h2
d1wbjksx0xxdn3.cloudfront.net/ub.js?1687799037
200 OK 1.9 kB URL GET HTTP/2 d1wbjksx0xxdn3.cloudfront.net/ub.js?1687799037
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
Hash b130aaa89fc46a9fb78e6a001f037b91
509210e237cf57fa3856e4849613287ed0825ad8
3537c6a36fae2d2132581b7915d51e1ed268ae146f5df18a84def7ed594fbe15
GET /ub.js?1687799037 HTTP/1.1
Host: d1wbjksx0xxdn3.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
content-length: 1864
date: Mon, 10 Jul 2023 04:37:55 GMT
last-modified: Mon, 26 Jun 2023 16:59:10 GMT
etag: "118cee1e64f6b283233c55aee7da10da"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
content-encoding: gzip
x-amz-version-id: DrDbRvFA9mO1umKMKkGWhgl31YCzXh7a
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: H4vAe2F5G8AZZVX8_Qy-_5grVtKPEmDk6psibewKjg6ZfZARpCYKLQ==
age: 2370505
X-Firefox-Spdy: h2
data.fxtm.info/gtm.js?id=GTM-PS52867
200 OK 203 kB URL GET HTTP/2 data.fxtm.info/gtm.js?id=GTM-PS52867
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerGoogle Trust Services LLC
Subjectdata.fxtm.info
FingerprintE1:59:62:CE:7A:D7:20:1A:B6:B3:01:27:C7:83:81:30:66:2D:B7:48
ValidityThu, 20 Jul 2023 13:32:08 GMT - Wed, 18 Oct 2023 14:18:17 GMT
File type gzip compressed data, from Unix\012- data
Size 203 kB (203000 bytes)
Hash f33259cd54016582c555a0626c2e6d6c
e2885beb0e6d4fdede23e81ca4e8c8cef7e5d804
229fb76cc13d80b1a528b2a9df6f5ffdfcdbf2e0deb0acf508fa32c0fbf7051e
GET /gtm.js?id=GTM-PS52867 HTTP/1.1
Host: data.fxtm.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Cookie: ubvt=v2%7C1b34664a-636c-4b65-851d-e4924b46917d%7Ce99e679d-5417-4190-b4ce-cd61fd09315e%3Aa%3Asingle
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: private, max-age=900
expires: Sun, 06 Aug 2023 15:21:09 GMT
content-type: application/javascript; charset=UTF-8
vary: accept-encoding
content-encoding: gzip
date: Sun, 06 Aug 2023 15:06:19 GMT
server: Google Frontend
X-Firefox-Spdy: h2
register.fxtm.info/favicon.ico
404 Not Found 47 B URL GET HTTP/1.1 register.fxtm.info/favicon.ico
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerLet's Encrypt
Subjectregister.fxtm.info
FingerprintA2:D4:07:D9:B7:D6:27:E3:CF:CC:46:05:87:10:EB:BA:AC:2D:3C:AD
ValidityWed, 31 May 2023 13:16:39 GMT - Tue, 29 Aug 2023 13:16:38 GMT
File type ASCII text, with no line terminators
Hash f9ae9006943e3a67b95ca4c6c733b6d4
9f9e7a7e2602d29e4df8c38df6277ab37fb1b079
cd8b79123a843eee64985a23257e2fab80ef2c4c08427b688ea979671fc1c457
GET /favicon.ico HTTP/1.1
Host: register.fxtm.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/switchers/
Cookie: ubvs=1b34664a-636c-4b65-851d-e4924b46917d; ubvt=v2%7C1b34664a-636c-4b65-851d-e4924b46917d%7Ce99e679d-5417-4190-b4ce-cd61fd09315e%3Aa%3Asingle
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
content-length: 47
content-type: text/plain; charset=utf-8
x-proxy-backend: content-gateway
www.googleoptimize.com/optimize.js?id=OPT-WRJBPQK
200 OK 65 kB URL GET HTTP/3 www.googleoptimize.com/optimize.js?id=OPT-WRJBPQK
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintDD:70:56:93:2B:32:FA:EA:25:D4:3B:17:50:BC:E0:4A:6A:BA:DB:8B
ValidityMon, 10 Jul 2023 08:16:15 GMT - Mon, 02 Oct 2023 08:16:14 GMT
File type ASCII text, with very long lines (2578)
Hash 84e8bcbc47fed4c1d15d498f87589f16
1e89af7fbbace0ab3639b7323738da87f803fbf9
8f85bdceb21390552d946784b647396080d05c390083980fdb3791772695b8e7
GET /optimize.js?id=OPT-WRJBPQK HTTP/1.1
Host: www.googleoptimize.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 06 Aug 2023 15:06:19 GMT
expires: Sun, 06 Aug 2023 15:06:19 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 64716
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.googletagmanager.com/gtag/js?id=G-MX7217M0KX&l=dataLayer&cx=c&sign=6ee30e55d1ec9088029370fb8bcb809d2f085cfbd0067c7871e5e6f993ffc551_20230806
200 OK 91 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-MX7217M0KX&l=dataLayer&cx=c&sign=6ee30e55d1ec9088029370fb8bcb809d2f085cfbd0067c7871e5e6f993ffc551_20230806
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintDD:70:56:93:2B:32:FA:EA:25:D4:3B:17:50:BC:E0:4A:6A:BA:DB:8B
ValidityMon, 10 Jul 2023 08:16:15 GMT - Mon, 02 Oct 2023 08:16:14 GMT
File type ASCII text, with very long lines (16791)
Hash 22d1c0eddbe48d55701c10ce700eff39
9517569ae17ff2fbb922380b8e9c5a69f7739d15
683a6683cd5376c72caf3a75a9a3154c6902d7dce0d84ee7882fdf07d6c3fa4c
GET /gtag/js?id=G-MX7217M0KX&l=dataLayer&cx=c&sign=6ee30e55d1ec9088029370fb8bcb809d2f085cfbd0067c7871e5e6f993ffc551_20230806 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 06 Aug 2023 15:06:19 GMT
expires: Sun, 06 Aug 2023 15:06:19 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 91202
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.redditstatic.com/ads/pixel.js
200 OK 7.4 kB URL GET HTTP/2 www.redditstatic.com/ads/pixel.js
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerDigiCert Inc
Subjectwww.redditstatic.com
FingerprintD8:03:AB:D0:AA:D4:A2:FC:9A:75:81:5B:41:F6:39:AA:26:D8:FA:A8
ValidityWed, 12 Apr 2023 00:00:00 GMT - Sun, 08 Oct 2023 23:59:59 GMT
File type ASCII text, with very long lines (23776)
Hash 78b6c68984a6ce5b3fcac1c6a9cad00c
02e1d366a17506cea8adfe5a15949aca89719a02
e803e774c7b59fe74f71ed93acaa875cf9a99947ff8ed7615cd0c93c1667250f
GET /ads/pixel.js HTTP/1.1
Host: www.redditstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Thu, 15 Jun 2023 20:49:59 GMT
etag: "4a205643a240cb95fa82289d62b5af7e"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=60
content-encoding: gzip
content-type: application/javascript
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sun, 06 Aug 2023 15:06:20 GMT
vary: Accept-Encoding,Origin
server: snooserv
report-to: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]}
nel: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
content-length: 7409
X-Firefox-Spdy: h2
my.forextime.com/en/identity/registration?theme=&sbt=&abt=&lbt=&sw=&cs=&dlt=&product=trading&origin=https%3A%2F%2Fregister.fxtm.info¤t_url=https://register.fxtm.info/&company=&version=49007&type=new&new-gtm=&disable_web_analytic=true
301 Moved Permanently 35 kB URL GET HTTP/3 my.forextime.com/en/identity/registration?theme=&sbt=&abt=&lbt=&sw=&cs=&dlt=&product=trading&origin=https%3A%2F%2Fregister.fxtm.info¤t_url=https://register.fxtm.info/&company=&version=49007&type=new&new-gtm=&disable_web_analytic=true
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerCentralNic Luxembourg Sàrl
Subject*.forextime.com
FingerprintD0:E4:5A:3F:40:96:1E:77:78:0E:76:1C:F2:44:08:B4:CD:B4:2F:91
ValidityFri, 18 Nov 2022 00:00:00 GMT - Sun, 10 Dec 2023 23:59:59 GMT
Hash 1790a7101cd824ee89b69e457e11bae0
1dfcb97984097c3b9947a793d0627759fc2df1ac
4399906d17181b757161bfc1df6cfced3eb7af4e2ce1b3e56f7e012dccf4b725
GET /en/identity/registration?theme=&sbt=&abt=&lbt=&sw=&cs=&dlt=&product=trading&origin=https%3A%2F%2Fregister.fxtm.info¤t_url=https://register.fxtm.info/&company=&version=49007&type=new&new-gtm=&disable_web_analytic=true HTTP/1.1
Host: my.forextime.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 301 Moved Permanently
date: Sun, 06 Aug 2023 15:06:19 GMT
content-type: text/html
location: https://my.forextime.com/en/identity/registration/?theme=&sbt=&abt=&lbt=&sw=&cs=&dlt=&product=trading&origin=https%3A%2F%2Fregister.fxtm.info¤t_url=https://register.fxtm.info/&company=&version=49007&type=new&new-gtm=&disable_web_analytic=true
my-country: NO
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000
server: cloudflare
cf-ray: 7f282ee11c28b4f1-OSL
alt-svc: h3=":443"; ma=86400
my.forextime.com/en/identity/registration/assets/fonts/sourcesanspro-light.woff2
200 OK 27 kB URL GET HTTP/3 my.forextime.com/en/identity/registration/assets/fonts/sourcesanspro-light.woff2
IP
Requested by https://my.forextime.com/en/identity/registration/?theme=&sbt=&abt=&lbt=&sw=&cs=&dlt=&product=trading&origin=https%3A%2F%2Fregister.fxtm.info¤t_url=https://register.fxtm.info/&company=&version=49007&type=new&new-gtm=&disable_web_analytic=true
Certificate IssuerCentralNic Luxembourg Sàrl
Subject*.forextime.com
FingerprintD0:E4:5A:3F:40:96:1E:77:78:0E:76:1C:F2:44:08:B4:CD:B4:2F:91
ValidityFri, 18 Nov 2022 00:00:00 GMT - Sun, 10 Dec 2023 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 26696, version 2.1376\012- data
Hash 2ca324fcf6a77175abba819aa3ea0e52
4fcf073c7336084fc9d4a0a670b594d39f3a4ff9
b94dccc42998f30ff9c7cad416b18180445f2d694cca94f1f942ebfb26772204
GET /en/identity/registration/assets/fonts/sourcesanspro-light.woff2 HTTP/1.1
Host: my.forextime.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://my.forextime.com/en/identity/registration/?theme=&sbt=&abt=&lbt=&sw=&cs=&dlt=&product=trading&origin=https%3A%2F%2Fregister.fxtm.info¤t_url=https://register.fxtm.info/&company=&version=49007&type=new&new-gtm=&disable_web_analytic=true
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 06 Aug 2023 15:06:20 GMT
content-type: font/woff2
content-length: 26696
last-modified: Fri, 04 Aug 2023 08:25:33 GMT
etag: "64ccb5fd-6848"
my-country: NO
accept-ranges: bytes
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000
server: cloudflare
cf-ray: 7f282ee3ff52b4f1-OSL
alt-svc: h3=":443"; ma=86400
ocsp.r2m02.amazontrust.com/
471 B URL ocsp.r2m02.amazontrust.com/
IP
Hash 3ad661945f149e4e4ac4946c577b7115
55c195ecd212c60c63e2f8d1d55ff519976442d6
3d5a77b40139d677a0e4669e40f8e3354b6811a2284f21672c35c8d2f7841f37
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Sun, 06 Aug 2023 15:06:20 GMT
Last-Modified: Sun, 06 Aug 2023 14:19:41 GMT
Server: ECAcc (amb/6B61)
X-Cache: Miss from cloudfront
Via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: cSurE6L_198DsMHdpJIV8hTcGa-n1dBUVqIiTVZv4EmtQavblNR4Ig==
Age: 2799
my.forextime.com/en/identity/registration/assets/fonts/sourcesanspro-regular.woff2
200 OK 27 kB URL GET HTTP/3 my.forextime.com/en/identity/registration/assets/fonts/sourcesanspro-regular.woff2
IP
Requested by https://my.forextime.com/en/identity/registration/?theme=&sbt=&abt=&lbt=&sw=&cs=&dlt=&product=trading&origin=https%3A%2F%2Fregister.fxtm.info¤t_url=https://register.fxtm.info/&company=&version=49007&type=new&new-gtm=&disable_web_analytic=true
Certificate IssuerCentralNic Luxembourg Sàrl
Subject*.forextime.com
FingerprintD0:E4:5A:3F:40:96:1E:77:78:0E:76:1C:F2:44:08:B4:CD:B4:2F:91
ValidityFri, 18 Nov 2022 00:00:00 GMT - Sun, 10 Dec 2023 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 27248, version 1.0\012- data
Hash 87a782df623610acdf66fe51b185c95c
57d45105e98c4fb6ae5a3935741f086c7fae7cee
52862c2d13e4544f4ea4eb963543c017ac6cb91a6ee0627caec4a39c45657f73
GET /en/identity/registration/assets/fonts/sourcesanspro-regular.woff2 HTTP/1.1
Host: my.forextime.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://my.forextime.com/en/identity/registration/?theme=&sbt=&abt=&lbt=&sw=&cs=&dlt=&product=trading&origin=https%3A%2F%2Fregister.fxtm.info¤t_url=https://register.fxtm.info/&company=&version=49007&type=new&new-gtm=&disable_web_analytic=true
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 06 Aug 2023 15:06:20 GMT
content-type: font/woff2
content-length: 27248
last-modified: Fri, 04 Aug 2023 08:25:33 GMT
etag: "64ccb5fd-6a70"
my-country: NO
accept-ranges: bytes
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000
server: cloudflare
cf-ray: 7f282ee40f5cb4f1-OSL
alt-svc: h3=":443"; ma=86400
fonts.ub-assets.com/css?family=Source+Sans+Pro:600,regular,300,700
200 OK 748 B URL GET HTTP/2 fonts.ub-assets.com/css?family=Source+Sans+Pro:600,regular,300,700
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerAmazon
Subjectfonts.ub-assets.com
FingerprintDA:B0:56:6C:D1:26:7A:FA:DF:C5:44:C6:5F:F3:C1:C4:69:F8:5B:B8
ValidityThu, 01 Jun 2023 00:00:00 GMT - Sat, 29 Jun 2024 23:59:59 GMT
Hash f94962aa33c575ec0db322274375d62b
f6ffec3975cf5eff8f71a5439a927f07c1801a13
0efc709e23e09a0dd005a6148cf0dd7c941c7dec38706005ae0f9ee37469de4d
GET /css?family=Source+Sans+Pro:600,regular,300,700 HTTP/1.1
Host: fonts.ub-assets.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
content-length: 748
date: Sun, 06 Aug 2023 15:06:20 GMT
x-amzn-requestid: 1f2af71e-fc0f-4bf5-90f1-2c571e938a6d
x-xss-protection: 0
access-control-allow-origin: *
content-encoding: gzip
strict-transport-security: max-age=31536000
x-frame-options: SAMEORIGIN
timing-allow-origin: *
cross-origin-opener-policy: same-origin-allow-popups
x-amz-apigw-id: JPmE8HMhIAMFhmQ=
cache-control: private, max-age=86400
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
x-amzn-trace-id: Root=1-64cfb6ec-7734defc34df0cc31dcc47d7
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rMZ-nZayXeLVViRSpfDj7FyjpMYPy-XmHTgTOv5kaEOvG1ExkDy8uQ==
X-Firefox-Spdy: h2
fonts.ub-assets.com/fonts/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2
200 OK 15 kB URL GET HTTP/2 fonts.ub-assets.com/fonts/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerAmazon
Subjectfonts.ub-assets.com
FingerprintDA:B0:56:6C:D1:26:7A:FA:DF:C5:44:C6:5F:F3:C1:C4:69:F8:5B:B8
ValidityThu, 01 Jun 2023 00:00:00 GMT - Sat, 29 Jun 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 14824, version 1.0\012- data
Hash 48598bad30f08e1c3eb3d0e69b420bd5
28c2cf160273c2062f909a875c4b4c0541ee2f84
ca57b79a870bbf54700730858603a70d79743779c1b059922ec401bfddc5adc9
GET /fonts/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2 HTTP/1.1
Host: fonts.ub-assets.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://register.fxtm.info
DNT: 1
Connection: keep-alive
Referer: https://fonts.ub-assets.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: font/woff2
content-length: 14824
date: Sat, 22 Jul 2023 09:59:16 GMT
x-amzn-requestid: 24c9769c-d695-495f-9da4-126ce233eeef
last-modified: Thu, 01 Jun 2023 22:52:55 GMT
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
x-xss-protection: 0
access-control-allow-origin: *
x-amzn-remapped-content-length: 14824
timing-allow-origin: *
cross-origin-opener-policy: same-origin; report-to="apps-themes"
x-amz-apigw-id: IddCQEwXIAMErLQ=
cache-control: public, max-age=31536000
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
x-amzn-trace-id: Root=1-64bba874-2090eff5279f6a460c2a8a1c
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: umqG_oBAjl4e3HUy7kB2ez6i3PBKH67yVKtZtU_PpkoKAilZ-_5NDg==
age: 1314424
X-Firefox-Spdy: h2
fonts.ub-assets.com/fonts/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2
200 OK 15 kB URL GET HTTP/2 fonts.ub-assets.com/fonts/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerAmazon
Subjectfonts.ub-assets.com
FingerprintDA:B0:56:6C:D1:26:7A:FA:DF:C5:44:C6:5F:F3:C1:C4:69:F8:5B:B8
ValidityThu, 01 Jun 2023 00:00:00 GMT - Sat, 29 Jun 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 14892, version 1.0\012- data
Hash 9ec6deaf6bada919e20b98f9f7b718b1
501d36403ad8205e4644532600019ecb10f5cb0a
7b348b30ea1fe43857e68fc462c29e5c6e63c97666af75135c4396a272e54762
GET /fonts/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2 HTTP/1.1
Host: fonts.ub-assets.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://register.fxtm.info
DNT: 1
Connection: keep-alive
Referer: https://fonts.ub-assets.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: font/woff2
content-length: 14892
date: Tue, 06 Jun 2023 18:26:27 GMT
x-amzn-requestid: 44d4a6e9-b3d8-47fb-a2e7-1780fc296dc1
last-modified: Thu, 01 Jun 2023 22:52:56 GMT
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
x-xss-protection: 0
access-control-allow-origin: *
x-amzn-remapped-content-length: 14892
timing-allow-origin: *
cross-origin-opener-policy: same-origin; report-to="apps-themes"
x-amz-apigw-id: GHANIESHoAMFkNg=
cache-control: public, max-age=31536000
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
x-amzn-trace-id: Root=1-647f7a53-745f12d34dac7daf1e79ebaa
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: diIogqlrdv0Fz4MQs82Vw-HqCu6pvXw7rokDhWJm7FABWsKGncWybQ==
age: 5258393
X-Firefox-Spdy: h2
my.forextime.com/en/identity/registration/assets/css/loader.css
200 OK 15 kB URL GET HTTP/3 my.forextime.com/en/identity/registration/assets/css/loader.css
IP
Requested by https://my.forextime.com/en/identity/registration/?theme=&sbt=&abt=&lbt=&sw=&cs=&dlt=&product=trading&origin=https%3A%2F%2Fregister.fxtm.info¤t_url=https://register.fxtm.info/&company=&version=49007&type=new&new-gtm=&disable_web_analytic=true
Certificate IssuerCentralNic Luxembourg Sàrl
Subject*.forextime.com
FingerprintD0:E4:5A:3F:40:96:1E:77:78:0E:76:1C:F2:44:08:B4:CD:B4:2F:91
ValidityFri, 18 Nov 2022 00:00:00 GMT - Sun, 10 Dec 2023 23:59:59 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash a7b474be494808805d1b39179314bc59
63de5efc01077eb04c85caabe437ec18a418b832
7df2ab1e34e5fd7739abe15f50b794bf14d55d4793da78fe5b0eee8971e02d14
GET /en/identity/registration/assets/css/loader.css HTTP/1.1
Host: my.forextime.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://my.forextime.com/en/identity/registration/?theme=&sbt=&abt=&lbt=&sw=&cs=&dlt=&product=trading&origin=https%3A%2F%2Fregister.fxtm.info¤t_url=https://register.fxtm.info/&company=&version=49007&type=new&new-gtm=&disable_web_analytic=true
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 06 Aug 2023 15:06:20 GMT
content-type: text/css
last-modified: Fri, 04 Aug 2023 08:25:33 GMT
etag: W/"64ccb5fd-2f5"
my-country: NO
content-encoding: gzip
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000
server: cloudflare
cf-ray: 7f282ee40f60b4f1-OSL
alt-svc: h3=":443"; ma=86400
my.forextime.com/en/identity/registration/assets/config.json?r=1mpz
200 OK 16 kB URL GET HTTP/3 my.forextime.com/en/identity/registration/assets/config.json?r=1mpz
IP
Requested by https://my.forextime.com/en/identity/registration/?theme=&sbt=&abt=&lbt=&sw=&cs=&dlt=&product=trading&origin=https%3A%2F%2Fregister.fxtm.info¤t_url=https://register.fxtm.info/&company=&version=49007&type=new&new-gtm=&disable_web_analytic=true
Certificate IssuerCentralNic Luxembourg Sàrl
Subject*.forextime.com
FingerprintD0:E4:5A:3F:40:96:1E:77:78:0E:76:1C:F2:44:08:B4:CD:B4:2F:91
ValidityFri, 18 Nov 2022 00:00:00 GMT - Sun, 10 Dec 2023 23:59:59 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash 3cf05079f237b7764d4a2fae5728bec3
730f3aedef83d5f1cc32fcb76ab2a0405ae0d508
3c8a5950a959dc4920b0fd3e7bbfcfec02a1ba5482896d3fbee1e52e23fe8d00
GET /en/identity/registration/assets/config.json?r=1mpz HTTP/1.1
Host: my.forextime.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://my.forextime.com/en/identity/registration/?theme=&sbt=&abt=&lbt=&sw=&cs=&dlt=&product=trading&origin=https%3A%2F%2Fregister.fxtm.info¤t_url=https://register.fxtm.info/&company=&version=49007&type=new&new-gtm=&disable_web_analytic=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 06 Aug 2023 15:06:20 GMT
content-type: application/json
last-modified: Thu, 03 Aug 2023 07:18:00 GMT
etag: W/"64cb54a8-1d1b"
my-country: NO
content-encoding: gzip
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000
server: cloudflare
cf-ray: 7f282ee67a66b4f1-OSL
alt-svc: h3=":443"; ma=86400
my.forextime.com/api/js/api/registration/check
200 OK 0 B URL POST HTTP/3 my.forextime.com/api/js/api/registration/check
IP
Requested by https://my.forextime.com/en/identity/registration/?theme=&sbt=&abt=&lbt=&sw=&cs=&dlt=&product=trading&origin=https%3A%2F%2Fregister.fxtm.info¤t_url=https://register.fxtm.info/&company=&version=49007&type=new&new-gtm=&disable_web_analytic=true
Certificate IssuerCentralNic Luxembourg Sàrl
Subject*.forextime.com
FingerprintD0:E4:5A:3F:40:96:1E:77:78:0E:76:1C:F2:44:08:B4:CD:B4:2F:91
ValidityFri, 18 Nov 2022 00:00:00 GMT - Sun, 10 Dec 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /api/js/api/registration/check HTTP/1.1
Host: my.forextime.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 13
Origin: https://my.forextime.com
DNT: 1
Connection: keep-alive
Referer: https://my.forextime.com/en/identity/registration/?theme=&sbt=&abt=&lbt=&sw=&cs=&dlt=&product=trading&origin=https%3A%2F%2Fregister.fxtm.info¤t_url=https://register.fxtm.info/&company=&version=49007&type=new&new-gtm=&disable_web_analytic=true
Cookie: isUnbounceDomain=true; isAllowedDomain=false; company=uk; currentWWWUrl=https://register.fxtm.info/; language=en; origin=https://register.fxtm.info; topUrl=https://register.fxtm.info/; redirect=; redirect_auth=/; redirect_login=; product=trading; country=NO
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 06 Aug 2023 15:06:20 GMT
content-type: application/json
content-length: 0
set-cookie: SESSe3e38161f9885fcea8b5789dd86182fa=sBABBSM7TUQdPx-Ug_oCIfJVr11Xh_Il8ybcZYv_dww; expires=Tue, 29-Aug-2023 18:39:40 GMT; Max-Age=2000000; path=/; domain=.myapi.forextime.com; HttpOnly
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000
server: cloudflare
cf-ray: 7f282ee6fb44b4f1-OSL
alt-svc: h3=":443"; ma=86400
my.forextime.com/en/identity/registration/?theme=&sbt=&abt=&lbt=&sw=&cs=&dlt=&product=trading&origin=https%3A%2F%2Fregister.fxtm.info¤t_url=https://register.fxtm.info/&company=&version=49007&type=new&new-gtm=&disable_web_analytic=true
200 OK 1.7 kB URL GET HTTP/3 my.forextime.com/en/identity/registration/?theme=&sbt=&abt=&lbt=&sw=&cs=&dlt=&product=trading&origin=https%3A%2F%2Fregister.fxtm.info¤t_url=https://register.fxtm.info/&company=&version=49007&type=new&new-gtm=&disable_web_analytic=true
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerCentralNic Luxembourg Sàrl
Subject*.forextime.com
FingerprintD0:E4:5A:3F:40:96:1E:77:78:0E:76:1C:F2:44:08:B4:CD:B4:2F:91
ValidityFri, 18 Nov 2022 00:00:00 GMT - Sun, 10 Dec 2023 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash e0f46f2fb83fab94417266c0914153c1
6ce03a3fd0e6076b54fdd11c5cf20c4b44ca305e
3b7469f7341a3b4355b5ce6f5d44cd3f91144c1781e17e85174e8e4fd8ba6aa1
GET /en/identity/registration/?theme=&sbt=&abt=&lbt=&sw=&cs=&dlt=&product=trading&origin=https%3A%2F%2Fregister.fxtm.info¤t_url=https://register.fxtm.info/&company=&version=49007&type=new&new-gtm=&disable_web_analytic=true HTTP/1.1
Host: my.forextime.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://register.fxtm.info/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 06 Aug 2023 15:06:19 GMT
content-type: text/html
last-modified: Fri, 04 Aug 2023 08:25:33 GMT
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000
server: cloudflare
cf-ray: 7f282ee27d86b4f1-OSL
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
data.fxtm.info/g/collect?v=2&tid=G-Z7G2DXPR5E>m=45he3820&_p=1617848251&cid=1652822685.1691334378&ul=en-us&sr=1280x1024&_fplc=0&sst.uc=&sst.gse=1&_s=1&sid=1691334378&sct=1&seg=0&dl=https%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F&dt=FXTM%20Gives%20You%20More%20For%20Less&en=page_view&_fv=1&_nsi=1&_ss=1&ep.Page%20Hostname=register.fxtm.info&ep.Page%20Path=%2Fswitchers%2F&ep.Page%20URL=https%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F&ep.Referrer=&ep.Is%20Unbounce%3F=true&ep.content_group=Unallocated&ep.GTM%20SS%20Domain=https%3A%2F%2Fdata.fxtm.info&ep.Domain%20Region=global&ep.user_data._tag_mode=CODE&richsstsse
200 OK 80 kB URL GET HTTP/2 data.fxtm.info/g/collect?v=2&tid=G-Z7G2DXPR5E>m=45he3820&_p=1617848251&cid=1652822685.1691334378&ul=en-us&sr=1280x1024&_fplc=0&sst.uc=&sst.gse=1&_s=1&sid=1691334378&sct=1&seg=0&dl=https%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F&dt=FXTM%20Gives%20You%20More%20For%20Less&en=page_view&_fv=1&_nsi=1&_ss=1&ep.Page%20Hostname=register.fxtm.info&ep.Page%20Path=%2Fswitchers%2F&ep.Page%20URL=https%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F&ep.Referrer=&ep.Is%20Unbounce%3F=true&ep.content_group=Unallocated&ep.GTM%20SS%20Domain=https%3A%2F%2Fdata.fxtm.info&ep.Domain%20Region=global&ep.user_data._tag_mode=CODE&richsstsse
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerGoogle Trust Services LLC
Subjectdata.fxtm.info
FingerprintE1:59:62:CE:7A:D7:20:1A:B6:B3:01:27:C7:83:81:30:66:2D:B7:48
ValidityThu, 20 Jul 2023 13:32:08 GMT - Wed, 18 Oct 2023 14:18:17 GMT
Hash 35d2b3666baabbb1ff7b191e8745ba6c
0418d123a9f6ec34515b4a49d62672987c3376e4
03b479ed77f1140b56ac5c433e919b0587b5044e1c193d40bce624732d1137bc
GET /g/collect?v=2&tid=G-Z7G2DXPR5E>m=45he3820&_p=1617848251&cid=1652822685.1691334378&ul=en-us&sr=1280x1024&_fplc=0&sst.uc=&sst.gse=1&_s=1&sid=1691334378&sct=1&seg=0&dl=https%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F&dt=FXTM%20Gives%20You%20More%20For%20Less&en=page_view&_fv=1&_nsi=1&_ss=1&ep.Page%20Hostname=register.fxtm.info&ep.Page%20Path=%2Fswitchers%2F&ep.Page%20URL=https%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F&ep.Referrer=&ep.Is%20Unbounce%3F=true&ep.content_group=Unallocated&ep.GTM%20SS%20Domain=https%3A%2F%2Fdata.fxtm.info&ep.Domain%20Region=global&ep.user_data._tag_mode=CODE&richsstsse HTTP/1.1
Host: data.fxtm.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://register.fxtm.info
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Cookie: ubvt=v2%7C1b34664a-636c-4b65-851d-e4924b46917d%7Ce99e679d-5417-4190-b4ce-cd61fd09315e%3Aa%3Asingle; _gcl_au=1.1.595871492.1691334378; _rdt_uuid=1691334378315.ec58d21b-21e3-4e37-97be-c941ef917431; _ga_Z7G2DXPR5E=GS1.1.1691334378.1.0.1691334378.0.0.0; _ga=GA1.1.1652822685.1691334378
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
set-cookie: FPLC=4THOxXLEv4pV8egjHBDAVkim6qpsIJhFeLUPOamyAg9BoySfL1BQhr%2F0cPmvYSqYQ%2FkcmoFOV%2FPCbbQ%2FEGGBUG57nlN%2FOFD%2BqrE4kAScq0GSEtHECQ7fNudu8Gq3wg%3D%3D; Max-Age=72000; Domain=fxtm.info; Path=/; Secure
FPID=FPID2.2.TIIqiEj9c%2BKXwR%2FV%2B%2FQvEw5jlWXSxZ64Z8q4aF8JP%2Bw%3D.1691334378; Max-Age=63072000; Domain=fxtm.info; Path=/; Secure; HttpOnly
FPAU=1.1.595871492.1691334378; Max-Age=7775998; Domain=fxtm.info; Path=/; Secure
cache-control: no-cache
content-type: text/plain
x-content-type-options: nosniff
x-accel-buffering: no
access-control-allow-origin: https://register.fxtm.info
access-control-allow-credentials: true
date: Sun, 06 Aug 2023 15:06:20 GMT
server: Google Frontend
expires: Sun, 06 Aug 2023 15:06:20 GMT
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=AW-768686761&l=dataLayer&cx=c
200 OK 78 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=AW-768686761&l=dataLayer&cx=c
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintDD:70:56:93:2B:32:FA:EA:25:D4:3B:17:50:BC:E0:4A:6A:BA:DB:8B
ValidityMon, 10 Jul 2023 08:16:15 GMT - Mon, 02 Oct 2023 08:16:14 GMT
File type ASCII text, with very long lines (4723)
Hash f18254f0db71c03a2f6b6070481b4b86
98c9babff5226042f0dcbcafe9e6f6b3ce11175f
462d31bef679b9fa3f2a3ddcc6a76a45db3f228d91a1035bb632671e5a732f59
GET /gtag/js?id=AW-768686761&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 06 Aug 2023 15:06:21 GMT
expires: Sun, 06 Aug 2023 15:06:21 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77885
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
my.forextime.com/en/identity/registration/assets/img/secured-logo.svg
200 OK 1.1 kB URL GET HTTP/3 my.forextime.com/en/identity/registration/assets/img/secured-logo.svg
IP
Requested by https://my.forextime.com/en/identity/registration/?theme=&sbt=&abt=&lbt=&sw=&cs=&dlt=&product=trading&origin=https%3A%2F%2Fregister.fxtm.info¤t_url=https://register.fxtm.info/&company=&version=49007&type=new&new-gtm=&disable_web_analytic=true
Certificate IssuerCentralNic Luxembourg Sàrl
Subject*.forextime.com
FingerprintD0:E4:5A:3F:40:96:1E:77:78:0E:76:1C:F2:44:08:B4:CD:B4:2F:91
ValidityFri, 18 Nov 2022 00:00:00 GMT - Sun, 10 Dec 2023 23:59:59 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash ea5c22984b245b9c7461798a975dd742
9777362284a3b4b16121c66aa4e8c064903abe41
a36878aaebd7ab3556d26d2f2ec1c0b316e79a2adf35fedcc9e068432dc6b6f5
GET /en/identity/registration/assets/img/secured-logo.svg HTTP/1.1
Host: my.forextime.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://my.forextime.com/en/identity/registration/assets/fxLight.g6l4yjyb7tpqxz9qey5jk.css
Cookie: isUnbounceDomain=true; isAllowedDomain=false; company=uk; currentWWWUrl=https://register.fxtm.info/; language=en; origin=https://register.fxtm.info; topUrl=https://register.fxtm.info/; redirect=; redirect_auth=/; redirect_login=; product=trading; country=NO
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 06 Aug 2023 15:06:20 GMT
content-type: image/svg+xml
last-modified: Fri, 04 Aug 2023 08:25:33 GMT
etag: W/"64ccb5fd-6c8"
my-country: NO
content-encoding: gzip
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000
server: cloudflare
cf-ray: 7f282ee89d11b4f1-OSL
alt-svc: h3=":443"; ma=86400
d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/bef9dd6b-support.png
200 OK 73 kB URL GET HTTP/2 d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/bef9dd6b-support.png
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type PNG image data, 290 x 337, 8-bit/color RGBA, non-interlaced\012- data
Hash 88d7255654af232af36fd1dca734e65b
3e46f37e5e52f102e121b0a3e8e64062efcefd77
ed4fd466e74f6ed44132f5d3e663f5b407c964b75fdfb122d997a4c879152e71
GET /register.fxtm.info/switchers/bef9dd6b-support.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 73060
date: Wed, 12 Jul 2023 08:24:02 GMT
last-modified: Wed, 29 Mar 2023 08:41:45 GMT
etag: "88d7255654af232af36fd1dca734e65b"
x-amz-server-side-encryption: AES256
cache-control: max-age=31557600
x-amz-version-id: Q5toCWy4TnzjM0mSUej8lbFCoJwZrcVe
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: RgTHBeVx7v9uGO3P2SvpkrmOxxM_7YVYoUZpYmJ7v4w2fAIGPs1-ng==
age: 2184140
X-Firefox-Spdy: h2
d1wbjksx0xxdn3.cloudfront.net/sp-2.14.0.js
200 OK 30 kB URL GET HTTP/2 d1wbjksx0xxdn3.cloudfront.net/sp-2.14.0.js
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (64903)
Hash 576d9639026167dbd06e782da275395f
80fe249778e307981557c0fa707cb8f4c5cb20e3
2e8292b18fc2acc297e1aa6acc6abe05136604137e744ba1b49984df330562bb
GET /sp-2.14.0.js HTTP/1.1
Host: d1wbjksx0xxdn3.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 30399
date: Thu, 20 Jul 2023 01:34:07 GMT
last-modified: Mon, 26 Jun 2023 16:59:50 GMT
etag: "73de733c308b8b5e44d2a6242dc4bd99"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
content-encoding: gzip
x-amz-version-id: 0Jz2Bo4sfVFEftEdSoFX9n5OCEdIO6kj
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: MZ6631P4H-5bEmLN_NodDmPflzDTFb25YHMxbaf9Tk9EBjjQrUCwwA==
age: 1517535
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/956f6b40-icon-email.svg
200 OK 875 B URL GET HTTP/2 d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/956f6b40-icon-email.svg
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text
Hash a5ed4122149c3b53f06a792f6c9a1b4a
cb2a63b78e3ffc8e8987b86d3afb346474008009
b169ece3fb73daf081a096a3e58815b5b0998b08eecb27b3738774386972894c
GET /register.fxtm.info/switchers/956f6b40-icon-email.svg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 875
date: Fri, 21 Jul 2023 13:14:16 GMT
last-modified: Wed, 29 Mar 2023 08:41:45 GMT
etag: "a5ed4122149c3b53f06a792f6c9a1b4a"
x-amz-server-side-encryption: AES256
cache-control: max-age=31557600
x-amz-version-id: ex.IYcNeLauttKm9iLtxb1jfsMxLUxwC
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: iq9byE9SjTDsWHF-qX8xIXB8Hu_VNqYlu6YQmG3eDcVJm7NRGLBkeg==
age: 1389126
X-Firefox-Spdy: h2
my.forextime.com/en/identity/registration/assets/fxLight.g6l4yjyb7tpqxz9qey5jk.css
200 OK 24 kB URL GET HTTP/3 my.forextime.com/en/identity/registration/assets/fxLight.g6l4yjyb7tpqxz9qey5jk.css
IP
Requested by https://my.forextime.com/en/identity/registration/?theme=&sbt=&abt=&lbt=&sw=&cs=&dlt=&product=trading&origin=https%3A%2F%2Fregister.fxtm.info¤t_url=https://register.fxtm.info/&company=&version=49007&type=new&new-gtm=&disable_web_analytic=true
Certificate IssuerCentralNic Luxembourg Sàrl
Subject*.forextime.com
FingerprintD0:E4:5A:3F:40:96:1E:77:78:0E:76:1C:F2:44:08:B4:CD:B4:2F:91
ValidityFri, 18 Nov 2022 00:00:00 GMT - Sun, 10 Dec 2023 23:59:59 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash f3cf68555d661afd4d95178e962777fa
7fddfbd85a91d0bfd005d6ec0bdbd52b498f7a3f
0537b45a62c399c2a2506969ff1f65ed804bc4896e5953cf14f5a4a9eae0a658
GET /en/identity/registration/assets/fxLight.g6l4yjyb7tpqxz9qey5jk.css HTTP/1.1
Host: my.forextime.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://my.forextime.com/en/identity/registration/?theme=&sbt=&abt=&lbt=&sw=&cs=&dlt=&product=trading&origin=https%3A%2F%2Fregister.fxtm.info¤t_url=https://register.fxtm.info/&company=&version=49007&type=new&new-gtm=&disable_web_analytic=true
Cookie: isUnbounceDomain=true; isAllowedDomain=false; company=uk; currentWWWUrl=https://register.fxtm.info/; language=en; origin=https://register.fxtm.info; topUrl=https://register.fxtm.info/; redirect=; redirect_auth=/; redirect_login=; product=trading; country=NO
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 06 Aug 2023 15:06:20 GMT
content-type: text/css
last-modified: Fri, 04 Aug 2023 08:25:33 GMT
etag: W/"64ccb5fd-125f1"
my-country: NO
content-encoding: gzip
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000
server: cloudflare
cf-ray: 7f282ee6fb3bb4f1-OSL
alt-svc: h3=":443"; ma=86400
my.forextime.com/en/identity/registration/assets/img/new-arrow-down.svg
200 OK 899 B URL GET HTTP/3 my.forextime.com/en/identity/registration/assets/img/new-arrow-down.svg
IP
Requested by https://my.forextime.com/en/identity/registration/?theme=&sbt=&abt=&lbt=&sw=&cs=&dlt=&product=trading&origin=https%3A%2F%2Fregister.fxtm.info¤t_url=https://register.fxtm.info/&company=&version=49007&type=new&new-gtm=&disable_web_analytic=true
Certificate IssuerCentralNic Luxembourg Sàrl
Subject*.forextime.com
FingerprintD0:E4:5A:3F:40:96:1E:77:78:0E:76:1C:F2:44:08:B4:CD:B4:2F:91
ValidityFri, 18 Nov 2022 00:00:00 GMT - Sun, 10 Dec 2023 23:59:59 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash 8be8a8219f7fc37cf79ca4d3af1ae534
112ce1d2bfdf35f4e51064cc99496f260c68de0d
0277b9e2809c22721f574c20d7185c979c04e01aa3ea5999c78acce46e6b40cf
GET /en/identity/registration/assets/img/new-arrow-down.svg HTTP/1.1
Host: my.forextime.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://my.forextime.com/en/identity/registration/assets/fxLight.g6l4yjyb7tpqxz9qey5jk.css
Cookie: isUnbounceDomain=true; isAllowedDomain=false; company=uk; currentWWWUrl=https://register.fxtm.info/; language=en; origin=https://register.fxtm.info; topUrl=https://register.fxtm.info/; redirect=; redirect_auth=/; redirect_login=; product=trading; country=NO; show_region=uk
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 06 Aug 2023 15:06:21 GMT
content-type: image/svg+xml
last-modified: Fri, 04 Aug 2023 08:25:33 GMT
etag: W/"64ccb5fd-156"
my-country: NO
content-encoding: gzip
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000
server: cloudflare
cf-ray: 7f282ee8fd84b4f1-OSL
alt-svc: h3=":443"; ma=86400
d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/932199ab-path-86253.png
200 OK 6.1 kB URL GET HTTP/2 d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/932199ab-path-86253.png
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type PNG image data, 482 x 472, 8-bit colormap, non-interlaced\012- data
Hash 1387cff86dc067f2d0d0a3c474802ef3
4de3cc32bcd9bf3e0963757deeca133ddaa7e8c3
747ab9d1f172e5413eacf4814147731d8ccefefabb6cfd40064426271ecfb17a
GET /register.fxtm.info/switchers/932199ab-path-86253.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 6128
date: Sat, 29 Jul 2023 11:58:17 GMT
last-modified: Wed, 29 Mar 2023 08:41:45 GMT
etag: "1387cff86dc067f2d0d0a3c474802ef3"
x-amz-server-side-encryption: AES256
cache-control: max-age=31557600
x-amz-version-id: dooC0sxH32ue2mvNiBsGK8hTnwFFfMby
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4FUtmUDhHSX8pjX175a3e0Pq395sPr6IG-N0Cds5IGMTZtfCEcnCMw==
age: 702485
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/a08df868-path-86246.png
200 OK 524 B URL GET HTTP/2 d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/a08df868-path-86246.png
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type PNG image data, 33 x 43, 8-bit colormap, non-interlaced\012- data
Hash 246be3f27b410ae08927ad3f2c5a3c41
2d2fbbdb630c643685b105ed11aee9768c468763
5a1dad2027c22cd4b16400eaa83201be9a43a7d49df54a9f8e3d3890dd41e26b
GET /register.fxtm.info/switchers/a08df868-path-86246.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 524
date: Sat, 29 Jul 2023 11:58:10 GMT
last-modified: Wed, 29 Mar 2023 08:41:45 GMT
etag: "246be3f27b410ae08927ad3f2c5a3c41"
x-amz-server-side-encryption: AES256
cache-control: max-age=31557600
x-amz-version-id: N7Zn0Iw_sTCqozTCGDVkpH9DFZIuRaqL
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zUHujAIdgwpyWrSrcRkFMYOOHbC-qTbHp84oxOcz197LJJl9BNI97w==
age: 702491
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/7b579ad4-path-86245.png
200 OK 304 B URL GET HTTP/2 d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/7b579ad4-path-86245.png
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type PNG image data, 20 x 19, 8-bit colormap, non-interlaced\012- data
Hash 2b524f016c476ef2bcab64fea502a35b
bbe6fffaceb3116a28d7e69e341c81cf5abe250e
69ce8ee6adb07e6756ee803fe67d972d439a069f140a3e790e712a9c5e6513d6
GET /register.fxtm.info/switchers/7b579ad4-path-86245.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 304
date: Sat, 29 Jul 2023 08:17:27 GMT
last-modified: Wed, 29 Mar 2023 08:41:45 GMT
etag: "2b524f016c476ef2bcab64fea502a35b"
x-amz-server-side-encryption: AES256
cache-control: max-age=31557600
x-amz-version-id: 5m5RmwHNFk3yiL4zA5pEaPQxM44UhQd9
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qKYmoNx2ugDzlBabLc6d89IZRSLHecmBefXW0FNmpvL--B9eB9Pw3Q==
age: 715734
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/26f86b0d-path-86251.png
200 OK 598 B URL GET HTTP/2 d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/26f86b0d-path-86251.png
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type PNG image data, 49 x 60, 8-bit colormap, non-interlaced\012- data
Hash 81716165bcf4e570ec9b5c6e4c0b8c0d
7ba5226f67328fd41aa6f49c1fec4f8a74923633
bc351834824e61abfc10b7860101f93c436a8d144835f0bdd2a105a7d4f17af6
GET /register.fxtm.info/switchers/26f86b0d-path-86251.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 598
date: Sat, 29 Jul 2023 11:58:17 GMT
last-modified: Wed, 29 Mar 2023 08:41:45 GMT
etag: "81716165bcf4e570ec9b5c6e4c0b8c0d"
x-amz-server-side-encryption: AES256
cache-control: max-age=31557600
x-amz-version-id: EH80rJ921r3c0Ydk5GpMr9xzFM66YyDg
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: j9xtUkC38lBe9oyb46mHQ7UzSXV-O0wOIftIRnX9MATqwytHSf-Wtw==
age: 702485
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/716500c2-path-86250.png
200 OK 547 B URL GET HTTP/2 d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/716500c2-path-86250.png
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type PNG image data, 51 x 61, 8-bit colormap, non-interlaced\012- data
Hash 7512e274e4ee412f72f109d5afc9cc92
52860138eaf9011cff1f0e55e9d43f503da5952c
f8681d7fb3a97aa161c50ffa4e49689ce442382f761aed94e8014d7215347e68
GET /register.fxtm.info/switchers/716500c2-path-86250.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 547
date: Sat, 22 Jul 2023 21:17:41 GMT
last-modified: Wed, 29 Mar 2023 08:41:45 GMT
etag: "7512e274e4ee412f72f109d5afc9cc92"
x-amz-server-side-encryption: AES256
cache-control: max-age=31557600
x-amz-version-id: 3PI6tDLWaJsIlc2ZB8likjXL7ufjuSGo
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: NlfNUeR_diWhUTKUQS0AqGkauimwz-kzy2i_uSe9Un1dAuX00cAlqQ==
age: 1273721
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/7f968d6f-path-86248.png
200 OK 728 B URL GET HTTP/2 d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/7f968d6f-path-86248.png
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type PNG image data, 91 x 54, 8-bit colormap, non-interlaced\012- data
Hash 018122b90e6735ccc1b91fe87c48d434
8bb99b03a30788e1c9c22006975b0e1ab9e0c879
68bfb410d27391ef931f6b1d5dfac3ac4458d4c05d4840b08ba63986435e395a
GET /register.fxtm.info/switchers/7f968d6f-path-86248.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 728
date: Sat, 29 Jul 2023 11:58:21 GMT
last-modified: Wed, 29 Mar 2023 08:41:45 GMT
etag: "018122b90e6735ccc1b91fe87c48d434"
x-amz-server-side-encryption: AES256
cache-control: max-age=31557600
x-amz-version-id: Y__7uF.TpboKqZaumpkrXust1AoGuZFh
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6xlETFcp70mLb77P3-eSuH66mSjx6Yun1D4KtG9AuovchEZAZNlTdg==
age: 702481
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/461865a1-path-86247.png
200 OK 805 B URL GET HTTP/2 d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/461865a1-path-86247.png
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type PNG image data, 188 x 53, 8-bit colormap, non-interlaced\012- data
Hash b835314def58f27ce47391c09938194b
d7ca41ed655cbe496fd99d441fab38f84dc25848
9cfdbff8c319bd93f54f67c47c1030a8fe6ff413aa6a6d3a89c707374b9cd092
GET /register.fxtm.info/switchers/461865a1-path-86247.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 805
date: Tue, 01 Aug 2023 06:47:26 GMT
last-modified: Wed, 29 Mar 2023 08:41:45 GMT
etag: "b835314def58f27ce47391c09938194b"
x-amz-server-side-encryption: AES256
cache-control: max-age=31557600
x-amz-version-id: Va.eewVVT0H0ykxYscwwekUWmO9KEy1i
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: CQIPf34D3rydttojPfNwnwmwxAI8BItG_ZeLxF_Ttk5iSSu7eI2AFw==
age: 461936
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/4886d3e5-path-86249.png
200 OK 352 B URL GET HTTP/2 d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/4886d3e5-path-86249.png
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type PNG image data, 42 x 15, 8-bit colormap, non-interlaced\012- data
Hash 621c03b189c40d6e519c5b2aecfd1110
c938c55f34d10a78bf7223a0da8d7b3cc6f96250
03f59789d4f3ea5046bc75010cb86c9b4aa8a8deacf25eaf27dae41509b52702
GET /register.fxtm.info/switchers/4886d3e5-path-86249.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 352
date: Tue, 25 Jul 2023 03:17:43 GMT
last-modified: Wed, 29 Mar 2023 08:41:45 GMT
etag: "621c03b189c40d6e519c5b2aecfd1110"
x-amz-server-side-encryption: AES256
cache-control: max-age=31557600
x-amz-version-id: 85zIKiW.Sjskx.2m4KDmNBgHCjbRGaJo
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 59VGetXu0-JEvOo3DcJY_X17nPnbYNl5OYZZvOo91QIHBeCUXG683A==
age: 1079319
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/cd3c6fea-line.png
200 OK 97 B URL GET HTTP/2 d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/cd3c6fea-line.png
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type PNG image data, 1440 x 1, 1-bit colormap, non-interlaced\012- data
Hash b32bc7d8e3c53e936cc72f7382c018f8
4b8693fc78783e58989b176dbab95db31ec9849c
cf436e353097f6f9e38eae7a1108dd1452d015840585169c8afa963cc70a72b6
GET /register.fxtm.info/switchers/cd3c6fea-line.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 97
date: Fri, 07 Jul 2023 15:07:34 GMT
last-modified: Wed, 29 Mar 2023 08:41:45 GMT
etag: "b32bc7d8e3c53e936cc72f7382c018f8"
x-amz-server-side-encryption: AES256
cache-control: max-age=31557600
x-amz-version-id: EjZESAOkV9JazImnMQF9jwlVYffUZmUJ
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3SIYkDp3MB1sQqd5j_H8d8NIMAqag6d-7asXPvS_NRrtSisVV4knaQ==
age: 2591928
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/29dea4b7-facebook.svg
200 OK 826 B URL GET HTTP/2 d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/29dea4b7-facebook.svg
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text
Hash aaf28412c2f2d6839e5b913c57c5f055
1cf437cb42c696d9578c11372b40e7bb6b4094b9
62ea81ee93587d1e4a7b12235cb43b7fae3117048f41986b37b74bdd10718023
GET /register.fxtm.info/switchers/29dea4b7-facebook.svg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 826
date: Thu, 27 Jul 2023 00:43:22 GMT
last-modified: Wed, 29 Mar 2023 08:41:45 GMT
etag: "aaf28412c2f2d6839e5b913c57c5f055"
x-amz-server-side-encryption: AES256
cache-control: max-age=31557600
x-amz-version-id: s.lMH_RPApL4avcO2UGHyAOYrQdS1Y1U
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6QuuT2m0B-WObw6jXc49C4LvOwY-hWoq6xOSekiDkONsAWaRsgN8jA==
age: 915780
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/f13c8ff7-group-48095778-3x_10ak0cx000000000000000.jpg
200 OK 25 kB URL GET HTTP/2 d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/f13c8ff7-group-48095778-3x_10ak0cx000000000000000.jpg
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type JPEG image data, baseline, precision 8, 380x465, components 3\012- data
Hash 13aa93c5c62ff4c59ea2703ecea12bf7
bfefcac06ef1a62fcadf75eaaa6df35914c52af8
fa56c1eb8300a9bb486c257c79e277a005bf5afc0d424b8ff73617fc6abf4f35
GET /register.fxtm.info/switchers/f13c8ff7-group-48095778-3x_10ak0cx000000000000000.jpg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 24746
date: Sat, 29 Jul 2023 11:58:47 GMT
last-modified: Wed, 29 Mar 2023 08:41:45 GMT
etag: "13aa93c5c62ff4c59ea2703ecea12bf7"
x-amz-server-side-encryption: AES256
cache-control: max-age=31557600
x-amz-version-id: cwkWMo2JDmAonzw6NSsbdVUhzmeteEOh
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: n-uW94FloB8X9jFJ5JfDVA7fQ8JYnOJf4b41VuDUCtjKkm-k7asGhA==
age: 702455
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/fd9a1a11-education.png
200 OK 100 kB URL GET HTTP/2 d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/fd9a1a11-education.png
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type PNG image data, 290 x 337, 8-bit/color RGBA, non-interlaced\012- data
Size 100 kB (100069 bytes)
Hash 35898730bfe78c0e16887ede5d0cb12e
8c213dd6dbb8a0d7c24d97f1792b4b6437e48d5d
f917843e0ec4218c35d13608818c235176a011776a13ed01d4afe17186f2b521
GET /register.fxtm.info/switchers/fd9a1a11-education.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 100069
date: Mon, 24 Jul 2023 08:28:24 GMT
last-modified: Wed, 29 Mar 2023 08:41:45 GMT
etag: "35898730bfe78c0e16887ede5d0cb12e"
x-amz-server-side-encryption: AES256
cache-control: max-age=31557600
x-amz-version-id: xPU4ZonFLQEAQ6lze.H.O9XDBGXULd7z
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: nj3anocpx-31kvymIXdqso1qMTKuFCm24Dp88IPF2mh1lHM3Kr2wDQ==
age: 1147078
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/6305610c-group-48095537-3x_10bx0s2000000000000000.png
200 OK 31 kB URL GET HTTP/2 d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/6305610c-group-48095537-3x_10bx0s2000000000000000.png
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type PNG image data, 1311 x 3087, 4-bit colormap, non-interlaced\012- data
Hash 0c7ee0a5d0d1cf652870de4f0e274be3
fdf3800dff9d90b8200dd5edc120c9d5ecf771ec
a6b2c4f744d1d00e9a1d5f6814c4c6a4b4737ab4d10f212f46ee281ab1d4de45
GET /register.fxtm.info/switchers/6305610c-group-48095537-3x_10bx0s2000000000000000.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 30752
date: Sat, 29 Jul 2023 11:58:36 GMT
last-modified: Wed, 29 Mar 2023 08:41:45 GMT
etag: "0c7ee0a5d0d1cf652870de4f0e274be3"
x-amz-server-side-encryption: AES256
cache-control: max-age=31557600
x-amz-version-id: XOfNp9w6XPB7iT1lHbpdoI5I15UUdey1
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -t2LKt4IiYwalr54xoll-uAZUOAY-bXuJZWu3d-5X9rpcaqw1yZm7A==
age: 702466
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/8b8b9a07-service.png
200 OK 114 kB URL GET HTTP/2 d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/8b8b9a07-service.png
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type PNG image data, 290 x 337, 8-bit/color RGBA, non-interlaced\012- data
Size 114 kB (113978 bytes)
Hash 2515f9a5bce0968db1e54b53d7f9959c
ac4f9d91ad016cc3949d3a9a382b8e4145d691a9
0b3cd0b5a5d73f40d005e2ef97b492167b082e47cb7b04ef04e6438d2c18020f
GET /register.fxtm.info/switchers/8b8b9a07-service.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 113978
date: Sun, 23 Jul 2023 03:00:56 GMT
last-modified: Wed, 29 Mar 2023 08:41:45 GMT
etag: "2515f9a5bce0968db1e54b53d7f9959c"
x-amz-server-side-encryption: AES256
cache-control: max-age=31557600
x-amz-version-id: I.gOLYwy7KIKZJaZLqSITZRTHAQbJauk
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Q3LPZyVZof1weV85Xw7iq2GCspGCLeGxz6WehhNJ9rK9faGVQOrwjA==
age: 1253126
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/156180ea-fxtm-invest_108w0ez000000000000000.png
200 OK 26 kB URL GET HTTP/2 d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/156180ea-fxtm-invest_108w0ez000000000000000.png
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type PNG image data, 396 x 667, 8-bit/color RGBA, non-interlaced\012- data
Hash 29adf425a84b44962d94b611444ac4fa
2b0d910369932242008676d2f1c86a37ed72f2a3
1f701d9f53dc8e9dc2b9bd3ab318693906fbd4654d55c7ff06ad35f49608b537
GET /register.fxtm.info/switchers/156180ea-fxtm-invest_108w0ez000000000000000.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 25501
date: Tue, 18 Jul 2023 20:44:42 GMT
last-modified: Wed, 29 Mar 2023 08:41:45 GMT
etag: "29adf425a84b44962d94b611444ac4fa"
x-amz-server-side-encryption: AES256
cache-control: max-age=31557600
x-amz-version-id: CtOhXmmIZRdwv3uM.2BmbMc25ThnSfpC
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xmorr0rzL2sVSAR1w2RuGUlqfn0P-tgfCe5IPgNLLPKKrtf6KNBeOA==
age: 1621300
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/e4767ed2-advantage-plus_108w0fm000000000000000.png
200 OK 30 kB URL GET HTTP/2 d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/e4767ed2-advantage-plus_108w0fm000000000000000.png
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type PNG image data, 380 x 667, 8-bit/color RGBA, non-interlaced\012- data
Hash 8c391e4321e5a463146adff301aba86d
d1504da69c3680806a0ddef774c90f0dbdda50b2
4293c28276e320ba0ffb3e87b93e960cce7728dd571c4b31ffcefafae3f4d5ee
GET /register.fxtm.info/switchers/e4767ed2-advantage-plus_108w0fm000000000000000.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 30116
date: Sat, 29 Jul 2023 11:58:40 GMT
last-modified: Wed, 29 Mar 2023 08:41:45 GMT
etag: "8c391e4321e5a463146adff301aba86d"
x-amz-server-side-encryption: AES256
cache-control: max-age=31557600
x-amz-version-id: J5YfGFN2OGHIuXE2e4N3D.QH9XwX19AT
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: CFS0UwaIqyhJKuazXoaF25MO1E1Xw-vGgHZILwbVRTeihOVkt9uGIA==
age: 702462
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/5cb07a18-advantage_108w0fm000000000000000.png
200 OK 29 kB URL GET HTTP/2 d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/5cb07a18-advantage_108w0fm000000000000000.png
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type PNG image data, 380 x 667, 8-bit/color RGBA, non-interlaced\012- data
Hash 0d35bbf8e03b5f607113aab1f1f7a612
6a3d3a58568a6d54c594d35587b36d4060d9305d
cd03364dc6154c4e897272c95a3632592ddfc81ffb6b2cd6b04547d75c98033d
GET /register.fxtm.info/switchers/5cb07a18-advantage_108w0fm000000000000000.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 28617
date: Sat, 29 Jul 2023 11:58:40 GMT
last-modified: Wed, 29 Mar 2023 08:41:45 GMT
etag: "0d35bbf8e03b5f607113aab1f1f7a612"
x-amz-server-side-encryption: AES256
cache-control: max-age=31557600
x-amz-version-id: r0PStXWhN9SGjaxRzpL.uFnbK5FUpM46
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Bh8MOUv7SvhnvRPYyEHdcaDTZ8gzprwc9ZZ36O8aYyLtTmJE6NPszA==
age: 702462
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/51978389-icons-more-opportunity.svg
200 OK 5.0 kB URL GET HTTP/2 d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/51978389-icons-more-opportunity.svg
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 883e29751ce9e05dc66c39cbfb6f55c9
55ccde1e48110c7de033e8cd7300ecff85cbf965
b7054ac09d1f6f3401e74943c54672c1bb175f4ca62e32ca11f5cf879a26ec01
GET /register.fxtm.info/switchers/51978389-icons-more-opportunity.svg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Sun, 23 Jul 2023 03:00:56 GMT
last-modified: Wed, 29 Mar 2023 08:41:45 GMT
etag: W/"400cf0ac943659ddbd2fce8c09e81ed1"
x-amz-server-side-encryption: AES256
cache-control: max-age=31557600
x-amz-version-id: 4vIzEbVjakyOwPnzcKT2Ouv3L_ij3js4
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5z5pM4oQc4g3eNd6QLd9O97NEMtiUmsrvzAk0c8BLwr5cKGhf1bIvQ==
age: 1253126
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash c314ff9bb959c77062cde8f2b72649ac
45506cd34c889b372325a95941dab8db2471d730
7375b6f143b8ee29efef3d483bf91ab691dd09109d8beb23347dcb0f3be64392
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 06 Aug 2023 15:06:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/pagead/1p-conversion/768686761/?random=379014097&fst=1691334380367&cv=10&fmt=3&label=VXxaCNvgwZoYEKn1xO4C&bg=ffffff&guid=ON&u_w=1280&u_h=1024>m=45h91e3821&value=0¤cy_code=USD&url=https%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F&tiba=FXTM%20Gives%20You%20More%20For%20Less&data=event%3Dpage_view%3BPage%20Hostname%3Dregister.fxtm.info%3BPage%20Path%3D%2Fswitchers%2F%3BPage%20URL%3Dhttps%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F%3BReferrer%3D%3BIs%20Unbounce%3F%3Dtrue%3Bcontent_group%3DUnallocated%3BGTM%20SS%20Domain%3Dhttps%3A%2F%2Fdata.fxtm.info%3BDomain%20Region%3Dglobal&auid=595871492.1691334378&bttype=purchase&em=tv.1&uip=91.90.42.0&s3p=1&gcp=1&sscte=1&ct_cookie_present=1
302 Found 42 B URL GET HTTP/2 www.google.com/pagead/1p-conversion/768686761/?random=379014097&fst=1691334380367&cv=10&fmt=3&label=VXxaCNvgwZoYEKn1xO4C&bg=ffffff&guid=ON&u_w=1280&u_h=1024>m=45h91e3821&value=0¤cy_code=USD&url=https%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F&tiba=FXTM%20Gives%20You%20More%20For%20Less&data=event%3Dpage_view%3BPage%20Hostname%3Dregister.fxtm.info%3BPage%20Path%3D%2Fswitchers%2F%3BPage%20URL%3Dhttps%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F%3BReferrer%3D%3BIs%20Unbounce%3F%3Dtrue%3Bcontent_group%3DUnallocated%3BGTM%20SS%20Domain%3Dhttps%3A%2F%2Fdata.fxtm.info%3BDomain%20Region%3Dglobal&auid=595871492.1691334378&bttype=purchase&em=tv.1&uip=91.90.42.0&s3p=1&gcp=1&sscte=1&ct_cookie_present=1
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
Fingerprint20:21:FE:C7:62:A5:FF:E8:45:8C:F7:77:23:E8:3D:DD:38:5B:2F:12
ValidityMon, 10 Jul 2023 08:21:46 GMT - Mon, 02 Oct 2023 08:21:45 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-conversion/768686761/?random=379014097&fst=1691334380367&cv=10&fmt=3&label=VXxaCNvgwZoYEKn1xO4C&bg=ffffff&guid=ON&u_w=1280&u_h=1024>m=45h91e3821&value=0¤cy_code=USD&url=https%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F&tiba=FXTM%20Gives%20You%20More%20For%20Less&data=event%3Dpage_view%3BPage%20Hostname%3Dregister.fxtm.info%3BPage%20Path%3D%2Fswitchers%2F%3BPage%20URL%3Dhttps%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F%3BReferrer%3D%3BIs%20Unbounce%3F%3Dtrue%3Bcontent_group%3DUnallocated%3BGTM%20SS%20Domain%3Dhttps%3A%2F%2Fdata.fxtm.info%3BDomain%20Region%3Dglobal&auid=595871492.1691334378&bttype=purchase&em=tv.1&uip=91.90.42.0&s3p=1&gcp=1&sscte=1&ct_cookie_present=1 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 06 Aug 2023 15:06:21 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/pagead/1p-conversion/768686761/?random=379014097&fst=1691334380367&cv=10&fmt=3&label=VXxaCNvgwZoYEKn1xO4C&bg=ffffff&guid=ON&u_w=1280&u_h=1024>m=45h91e3821&value=0¤cy_code=USD&url=https%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F&tiba=FXTM%20Gives%20You%20More%20For%20Less&data=event%3Dpage_view%3BPage%20Hostname%3Dregister.fxtm.info%3BPage%20Path%3D%2Fswitchers%2F%3BPage%20URL%3Dhttps%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F%3BReferrer%3D%3BIs%20Unbounce%3F%3Dtrue%3Bcontent_group%3DUnallocated%3BGTM%20SS%20Domain%3Dhttps%3A%2F%2Fdata.fxtm.info%3BDomain%20Region%3Dglobal&auid=595871492.1691334378&bttype=purchase&em=tv.1&uip=91.90.42.0&s3p=1&gcp=1&sscte=1&ct_cookie_present=1&ipr=y
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/pagead/1p-conversion/768686761/?random=1691334379478&cv=11&fst=1691334379478&bg=ffffff&guid=ON&async=1>m=45be3820&u_w=1280&u_h=1024&url=https%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F&label=qsYRCOb76-ECEKn1xO4C&hn=www.google.com&frm=0&tiba=FXTM%20Gives%20You%20More%20For%20Less>m_ee=1&auid=595871492.1691334378&data=event%3Dconversion&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
302 Found 63 B URL GET HTTP/2 www.google.com/pagead/1p-conversion/768686761/?random=1691334379478&cv=11&fst=1691334379478&bg=ffffff&guid=ON&async=1>m=45be3820&u_w=1280&u_h=1024&url=https%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F&label=qsYRCOb76-ECEKn1xO4C&hn=www.google.com&frm=0&tiba=FXTM%20Gives%20You%20More%20For%20Less>m_ee=1&auid=595871492.1691334378&data=event%3Dconversion&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
Fingerprint20:21:FE:C7:62:A5:FF:E8:45:8C:F7:77:23:E8:3D:DD:38:5B:2F:12
ValidityMon, 10 Jul 2023 08:21:46 GMT - Mon, 02 Oct 2023 08:21:45 GMT
File type ASCII text, with no line terminators
Hash ad8b6f08655797587cdec719a94efe59
182adf5a140796f81e930649d05654dbf22fd5b7
77d5fe96defd6c8c1e3b0466b4827cf83dc7e5c727a10177e115d25132fa86f6
GET /pagead/1p-conversion/768686761/?random=1691334379478&cv=11&fst=1691334379478&bg=ffffff&guid=ON&async=1>m=45be3820&u_w=1280&u_h=1024&url=https%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F&label=qsYRCOb76-ECEKn1xO4C&hn=www.google.com&frm=0&tiba=FXTM%20Gives%20You%20More%20For%20Less>m_ee=1&auid=595871492.1691334378&data=event%3Dconversion&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 06 Aug 2023 15:06:21 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
location: https://www.google.no/pagead/1p-conversion/768686761/?random=1691334379478&cv=11&fst=1691334379478&bg=ffffff&guid=ON&async=1>m=45be3820&u_w=1280&u_h=1024&url=https%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F&label=qsYRCOb76-ECEKn1xO4C&hn=www.google.com&frm=0&tiba=FXTM%20Gives%20You%20More%20For%20Less>m_ee=1&auid=595871492.1691334378&data=event%3Dconversion&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 55f547ef5922bd86a55e51439526e373
316d4569a232e3abee44514e5108b6efca06f20d
1349d63ae8e640b915da1b9622f939d59f8e3677d5205cc2fff5636d76b4f060
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 06 Aug 2023 15:06:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/62b1bcc1-instagram.svg
200 OK 1.8 kB URL GET HTTP/2 d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/62b1bcc1-instagram.svg
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 01555ba9350da837799ced616f469539
4ffd168e879e039f0e13e84a6612b7c0f80de826
ecfa42938f035307285db57a913e9625a2503e8fdb1eb8ed8291aeab3a0b3591
GET /register.fxtm.info/switchers/62b1bcc1-instagram.svg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Tue, 18 Jul 2023 08:21:25 GMT
last-modified: Wed, 29 Mar 2023 08:41:45 GMT
etag: W/"2ea053a30f6b50fb2ca3e7465b5f2d74"
x-amz-server-side-encryption: AES256
cache-control: max-age=31557600
x-amz-version-id: CeYn5gBjiqPewUSi7vzaQKh2L.J.dk_N
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: HYZoBtrRYhp661lt_ioj_O-10oJ-GbQO9xJjGBWkiI7iQmV9WZ4vTQ==
age: 1665897
X-Firefox-Spdy: h2
www.google.no/pagead/1p-conversion/768686761/?random=1691334379478&cv=11&fst=1691334379478&bg=ffffff&guid=ON&async=1>m=45be3820&u_w=1280&u_h=1024&url=https%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F&label=qsYRCOb76-ECEKn1xO4C&hn=www.google.com&frm=0&tiba=FXTM%20Gives%20You%20More%20For%20Less>m_ee=1&auid=595871492.1691334378&data=event%3Dconversion&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y
200 OK 63 B URL GET HTTP/2 www.google.no/pagead/1p-conversion/768686761/?random=1691334379478&cv=11&fst=1691334379478&bg=ffffff&guid=ON&async=1>m=45be3820&u_w=1280&u_h=1024&url=https%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F&label=qsYRCOb76-ECEKn1xO4C&hn=www.google.com&frm=0&tiba=FXTM%20Gives%20You%20More%20For%20Less>m_ee=1&auid=595871492.1691334378&data=event%3Dconversion&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerGoogle Trust Services LLC
Subject*.google.no
Fingerprint5B:2A:27:EE:92:DA:1F:FE:B6:BA:47:B0:1B:37:22:43:B2:A4:16:47
ValidityMon, 10 Jul 2023 08:23:30 GMT - Mon, 02 Oct 2023 08:23:29 GMT
File type ASCII text, with no line terminators
Hash ad8b6f08655797587cdec719a94efe59
182adf5a140796f81e930649d05654dbf22fd5b7
77d5fe96defd6c8c1e3b0466b4827cf83dc7e5c727a10177e115d25132fa86f6
GET /pagead/1p-conversion/768686761/?random=1691334379478&cv=11&fst=1691334379478&bg=ffffff&guid=ON&async=1>m=45be3820&u_w=1280&u_h=1024&url=https%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F&label=qsYRCOb76-ECEKn1xO4C&hn=www.google.com&frm=0&tiba=FXTM%20Gives%20You%20More%20For%20Less>m_ee=1&auid=595871492.1691334378&data=event%3Dconversion&gcp=1&sscte=1&ct_cookie_present=1&rfmt=3&fmt=4&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://register.fxtm.info/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 06 Aug 2023 15:06:21 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/javascript; charset=UTF-8
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 63
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.no/pagead/1p-conversion/768686761/?random=379014097&fst=1691334380367&cv=10&fmt=3&label=VXxaCNvgwZoYEKn1xO4C&bg=ffffff&guid=ON&u_w=1280&u_h=1024>m=45h91e3821&value=0¤cy_code=USD&url=https%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F&tiba=FXTM%20Gives%20You%20More%20For%20Less&data=event%3Dpage_view%3BPage%20Hostname%3Dregister.fxtm.info%3BPage%20Path%3D%2Fswitchers%2F%3BPage%20URL%3Dhttps%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F%3BReferrer%3D%3BIs%20Unbounce%3F%3Dtrue%3Bcontent_group%3DUnallocated%3BGTM%20SS%20Domain%3Dhttps%3A%2F%2Fdata.fxtm.info%3BDomain%20Region%3Dglobal&auid=595871492.1691334378&bttype=purchase&em=tv.1&uip=91.90.42.0&s3p=1&gcp=1&sscte=1&ct_cookie_present=1&ipr=y
200 OK 42 B URL GET HTTP/2 www.google.no/pagead/1p-conversion/768686761/?random=379014097&fst=1691334380367&cv=10&fmt=3&label=VXxaCNvgwZoYEKn1xO4C&bg=ffffff&guid=ON&u_w=1280&u_h=1024>m=45h91e3821&value=0¤cy_code=USD&url=https%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F&tiba=FXTM%20Gives%20You%20More%20For%20Less&data=event%3Dpage_view%3BPage%20Hostname%3Dregister.fxtm.info%3BPage%20Path%3D%2Fswitchers%2F%3BPage%20URL%3Dhttps%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F%3BReferrer%3D%3BIs%20Unbounce%3F%3Dtrue%3Bcontent_group%3DUnallocated%3BGTM%20SS%20Domain%3Dhttps%3A%2F%2Fdata.fxtm.info%3BDomain%20Region%3Dglobal&auid=595871492.1691334378&bttype=purchase&em=tv.1&uip=91.90.42.0&s3p=1&gcp=1&sscte=1&ct_cookie_present=1&ipr=y
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerGoogle Trust Services LLC
Subject*.google.no
Fingerprint5B:2A:27:EE:92:DA:1F:FE:B6:BA:47:B0:1B:37:22:43:B2:A4:16:47
ValidityMon, 10 Jul 2023 08:23:30 GMT - Mon, 02 Oct 2023 08:23:29 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-conversion/768686761/?random=379014097&fst=1691334380367&cv=10&fmt=3&label=VXxaCNvgwZoYEKn1xO4C&bg=ffffff&guid=ON&u_w=1280&u_h=1024>m=45h91e3821&value=0¤cy_code=USD&url=https%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F&tiba=FXTM%20Gives%20You%20More%20For%20Less&data=event%3Dpage_view%3BPage%20Hostname%3Dregister.fxtm.info%3BPage%20Path%3D%2Fswitchers%2F%3BPage%20URL%3Dhttps%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F%3BReferrer%3D%3BIs%20Unbounce%3F%3Dtrue%3Bcontent_group%3DUnallocated%3BGTM%20SS%20Domain%3Dhttps%3A%2F%2Fdata.fxtm.info%3BDomain%20Region%3Dglobal&auid=595871492.1691334378&bttype=purchase&em=tv.1&uip=91.90.42.0&s3p=1&gcp=1&sscte=1&ct_cookie_present=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://register.fxtm.info/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 06 Aug 2023 15:06:21 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/cd34ee30-group-35600.svg
200 OK 1.3 kB URL GET HTTP/2 d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/cd34ee30-group-35600.svg
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash b8e9aba5f7fa61cbdf956909e6294d41
f3184af7d7b0a37e34ecb3e080cd35f26b7a528e
f5e9d7b99a85a257c7cc2bbb0ee7d4a3eb0c07534002f289b20be17d1f4a8ab1
GET /register.fxtm.info/switchers/cd34ee30-group-35600.svg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Thu, 27 Jul 2023 00:43:24 GMT
last-modified: Wed, 29 Mar 2023 08:41:45 GMT
etag: W/"35faf562822c9e9aadd098cdc68cbfc5"
x-amz-server-side-encryption: AES256
cache-control: max-age=31557600
x-amz-version-id: 9AOFpb5Nltd845JkjwnCvnvjOLPdBcN1
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 2uhckUYapfNW7jZFxpluDYeoiArYi76Jq94ErNsnPXkSGoWNq-L3lw==
age: 915777
X-Firefox-Spdy: h2
ocsp.r2m01.amazontrust.com/
471 B URL ocsp.r2m01.amazontrust.com/
IP
Hash 42b1ec651796864a054065b9691ca9f4
83cf97188bfc45a0a9c20030194a39a354257e86
c5c2d73b7d22c8824d73c6d187bd75df241d403b8824fb6ae8a49e06af49e4fa
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Sun, 06 Aug 2023 15:06:21 GMT
Last-Modified: Sun, 06 Aug 2023 13:42:13 GMT
Server: ECAcc (ska/F776)
X-Cache: Miss from cloudfront
Via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Apk5_QDr9rnld82_apCKGiIpB1XN3CR8xYv4DKPj-kTGpmBydq3ihQ==
Age: 5048
events.ub-analytics.com/i?stm=1691334379678&e=pv&url=https%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F&page=FXTM%20Gives%20You%20More%20For%20Less&tv=js-2.14.0&tna=sp-ub&aid=landing_page&p=web&tz=UTC&lang=en-US&cs=UTF-8&f_pdf=1&f_qt=0&f_realp=0&f_wma=0&f_dir=0&f_fla=0&f_java=0&f_gears=0&f_ag=0&res=1280x1024&cd=24&eid=b6b0499a-c6ea-4fe7-855d-f55042eea3bb&dtm=1691334379676&vp=1280x1024&ds=1440x4424&vid=1&sid=e8ebc023-3bdb-4d8a-84ca-319a52dcff8a&duid=b29d3c8e-6bd1-4db0-8c35-f37594d0b227&uid=1b34664a-636c-4b65-851d-e4924b46917d&cx=eyJzY2hlbWEiOiJpZ2x1OmNvbS5zbm93cGxvd2FuYWx5dGljcy5zbm93cGxvdy9jb250ZXh0cy9qc29uc2NoZW1hLzEtMC0wIiwiZGF0YSI6W3sic2NoZW1hIjoianNfdHJhY2tlcl9jb250ZXh0X3YxLjEuanNvbiIsImRhdGEiOnsicGFnZUlkIjoiZTk5ZTY3OWQtNTQxNy00MTkwLWI0Y2UtY2Q2MWZkMDkzMTVlIiwidmFyaWFudElkIjoiYSIsImV2ZW50VHlwZSI6InZpc2l0IiwiZXZlbnRNZXRhZGF0YSI6W10sInJvdXRpbmdTdHJhdGVneSI6InNpbmdsZSJ9fV19
200 OK 43 B URL GET HTTP/2 events.ub-analytics.com/i?stm=1691334379678&e=pv&url=https%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F&page=FXTM%20Gives%20You%20More%20For%20Less&tv=js-2.14.0&tna=sp-ub&aid=landing_page&p=web&tz=UTC&lang=en-US&cs=UTF-8&f_pdf=1&f_qt=0&f_realp=0&f_wma=0&f_dir=0&f_fla=0&f_java=0&f_gears=0&f_ag=0&res=1280x1024&cd=24&eid=b6b0499a-c6ea-4fe7-855d-f55042eea3bb&dtm=1691334379676&vp=1280x1024&ds=1440x4424&vid=1&sid=e8ebc023-3bdb-4d8a-84ca-319a52dcff8a&duid=b29d3c8e-6bd1-4db0-8c35-f37594d0b227&uid=1b34664a-636c-4b65-851d-e4924b46917d&cx=eyJzY2hlbWEiOiJpZ2x1OmNvbS5zbm93cGxvd2FuYWx5dGljcy5zbm93cGxvdy9jb250ZXh0cy9qc29uc2NoZW1hLzEtMC0wIiwiZGF0YSI6W3sic2NoZW1hIjoianNfdHJhY2tlcl9jb250ZXh0X3YxLjEuanNvbiIsImRhdGEiOnsicGFnZUlkIjoiZTk5ZTY3OWQtNTQxNy00MTkwLWI0Y2UtY2Q2MWZkMDkzMTVlIiwidmFyaWFudElkIjoiYSIsImV2ZW50VHlwZSI6InZpc2l0IiwiZXZlbnRNZXRhZGF0YSI6W10sInJvdXRpbmdTdHJhdGVneSI6InNpbmdsZSJ9fV19
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerAmazon
Subject*.ub-analytics.com
Fingerprint96:6D:96:00:51:EE:2C:8B:1E:81:F1:41:D7:96:5F:50:46:50:94:67
ValiditySat, 11 Mar 2023 00:00:00 GMT - Mon, 08 Apr 2024 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash fb02f374b8f73825415db1bccd4bd76d
b103aa629cacdd90b39538a7561da7f8e49ad73f
caa849b179befa2645a8e2c474d2e82a76777a3305315ece911013e8ee9a916c
GET /i?stm=1691334379678&e=pv&url=https%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F&page=FXTM%20Gives%20You%20More%20For%20Less&tv=js-2.14.0&tna=sp-ub&aid=landing_page&p=web&tz=UTC&lang=en-US&cs=UTF-8&f_pdf=1&f_qt=0&f_realp=0&f_wma=0&f_dir=0&f_fla=0&f_java=0&f_gears=0&f_ag=0&res=1280x1024&cd=24&eid=b6b0499a-c6ea-4fe7-855d-f55042eea3bb&dtm=1691334379676&vp=1280x1024&ds=1440x4424&vid=1&sid=e8ebc023-3bdb-4d8a-84ca-319a52dcff8a&duid=b29d3c8e-6bd1-4db0-8c35-f37594d0b227&uid=1b34664a-636c-4b65-851d-e4924b46917d&cx=eyJzY2hlbWEiOiJpZ2x1OmNvbS5zbm93cGxvd2FuYWx5dGljcy5zbm93cGxvdy9jb250ZXh0cy9qc29uc2NoZW1hLzEtMC0wIiwiZGF0YSI6W3sic2NoZW1hIjoianNfdHJhY2tlcl9jb250ZXh0X3YxLjEuanNvbiIsImRhdGEiOnsicGFnZUlkIjoiZTk5ZTY3OWQtNTQxNy00MTkwLWI0Y2UtY2Q2MWZkMDkzMTVlIiwidmFyaWFudElkIjoiYSIsImV2ZW50VHlwZSI6InZpc2l0IiwiZXZlbnRNZXRhZGF0YSI6W10sInJvdXRpbmdTdHJhdGVneSI6InNpbmdsZSJ9fV19 HTTP/1.1
Host: events.ub-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Aug 2023 15:06:21 GMT
content-type: image/gif
content-length: 43
cache-control: no-cache, no-store, must-revalidate
p3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
access-control-allow-origin: *
access-control-allow-credentials: true
server: akka-http/10.2.9
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/687b6234-icons-more-analysis.svg
200 OK 1.6 kB URL GET HTTP/2 d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/687b6234-icons-more-analysis.svg
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 4ad4687a1f1baffd1548e0977fbc5d7d
4fe21601612af86bb1a1ed4ac1c42f8dfd8f2c57
2c82b3e3c99c01e7fbd8512902aaba2f07e94aa4eeecb61e1a0c8c803d9fa351
GET /register.fxtm.info/switchers/687b6234-icons-more-analysis.svg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Thu, 27 Jul 2023 03:33:39 GMT
last-modified: Wed, 29 Mar 2023 08:41:45 GMT
etag: W/"97eb068d4e8e5425afa34b96036360eb"
x-amz-server-side-encryption: AES256
cache-control: max-age=31557600
x-amz-version-id: 8l3PLC8Xq9dT_EZFAVNCWLLI08Mj4BOP
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: RV6l3ZnvFtvLioNQFrh1tsVnTK_k0e31y5-3_1i6tKFIAll-xiZLJQ==
age: 905563
X-Firefox-Spdy: h2
t.adline.com/track.php
500 Internal Server Error 20 B IP
ASN #24940 Hetzner Online GmbH
Requested by https://register.fxtm.info/switchers/
Certificate IssuerLet's Encrypt
Subjectt.adline.com
Fingerprint90:91:4A:FB:56:FB:C7:23:1E:ED:D3:9B:93:AE:48:B0:80:49:97:CE
ValidityTue, 20 Jun 2023 05:44:29 GMT - Mon, 18 Sep 2023 05:44:28 GMT
File type gzip compressed data, from Unix\012- data
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
OPTIONS /track.php HTTP/1.1
Host: t.adline.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://register.fxtm.info/
Origin: https://register.fxtm.info
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 06 Aug 2023 15:06:22 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/7.4.30
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
X-XSS-Protection: 1; mode=block
Content-Encoding: gzip
t.adline.com/track.php
500 Internal Server Error 0 B IP
ASN #24940 Hetzner Online GmbH
Requested by https://register.fxtm.info/switchers/
Certificate IssuerLet's Encrypt
Subjectt.adline.com
Fingerprint90:91:4A:FB:56:FB:C7:23:1E:ED:D3:9B:93:AE:48:B0:80:49:97:CE
ValidityTue, 20 Jun 2023 05:44:29 GMT - Mon, 18 Sep 2023 05:44:28 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /track.php HTTP/1.1
Host: t.adline.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/json
Content-Length: 465
Origin: https://register.fxtm.info
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 500 Internal Server Error
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 06 Aug 2023 15:06:22 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.4.30
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
obs.cheqzone.com/mon
200 OK 0 B IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerZeroSSL
Subject*.cheqzone.com
Fingerprint4D:4A:D9:B4:B5:55:F4:2A:51:11:82:01:09:49:2A:82:E6:0B:44:A5
ValidityWed, 28 Jun 2023 00:00:00 GMT - Tue, 26 Sep 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obs.cheqzone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1777
Origin: https://register.fxtm.info
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Cookie: cg_uuid=c7d5cfb2b509a83ec861673f853ef4ea
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://register.fxtm.info
content-type: application/json
date: Sun, 06 Aug 2023 15:06:22 GMT
content-length: 0
X-Firefox-Spdy: h2
obs.cheqzone.com/mon
200 OK 0 B IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerZeroSSL
Subject*.cheqzone.com
Fingerprint4D:4A:D9:B4:B5:55:F4:2A:51:11:82:01:09:49:2A:82:E6:0B:44:A5
ValidityWed, 28 Jun 2023 00:00:00 GMT - Tue, 26 Sep 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obs.cheqzone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1772
Origin: https://register.fxtm.info
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Cookie: cg_uuid=c7d5cfb2b509a83ec861673f853ef4ea
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://register.fxtm.info
content-type: application/json
date: Sun, 06 Aug 2023 15:06:22 GMT
content-length: 0
X-Firefox-Spdy: h2
cdn.shareaholic.net/assets/pub/shareaholic.js
200 OK 4.3 kB URL GET HTTP/2 cdn.shareaholic.net/assets/pub/shareaholic.js
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerLet's Encrypt
Subjectcdn.shareaholic.net
FingerprintF7:DD:ED:5B:A8:14:87:31:98:CA:91:1C:F0:D7:59:28:9B:B6:6E:20
ValidityWed, 05 Jul 2023 11:02:42 GMT - Tue, 03 Oct 2023 11:02:41 GMT
File type ASCII text, with very long lines (10540), with no line terminators
Hash fc94d70a50d514576d20f3a9eb11cc20
4a56d8075fabc4158f7958806644ccced87b0a6b
9e2c6fd3659d80cec1bb420aef34378f9f2b411ab26be5ef6e6d11a5eff53817
GET /assets/pub/shareaholic.js HTTP/1.1
Host: cdn.shareaholic.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Aug 2023 15:06:24 GMT
content-encoding: gzip
content-length: 4286
content-type: application/javascript; charset=UTF-8
last-modified: Fri, 28 Jul 2023 21:56:48 GMT
accept-ranges: bytes
server: nginx
x-amz-id-2: IteSGZepncwawBzcGJUeSSQzhdGLgsLBL9KRkNw2zhuewNzLFrP09CeQdVWH+TmooPbKdPZkC5c=
x-amz-request-id: 4DRBD8GVGG8F2A64
etag: "4ee6e9f2ec91e9366e796a9e46b56816"
x-amz-server-side-encryption: AES256
cache-control: max-age=1200, public
access-control-allow-origin: *
x-hello-human: Join the fun! Apply at www.shareaholic.com/jobs
x-hw: 1691334384.cds224.sk1.hn,1691334384.cds201.sk1.c
X-Firefox-Spdy: h2
bat.bing.com/bat.js
200 OK 12 kB IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://register.fxtm.info/switchers/
Certificate IssuerMicrosoft Corporation
Subjectwww.bing.com
FingerprintCD:30:E8:F8:D2:A7:C2:85:A1:F7:A2:2E:B6:B3:FD:F9:08:FA:31:D1
ValidityWed, 26 Jul 2023 23:57:23 GMT - Mon, 22 Jan 2024 23:57:23 GMT
File type Unicode text, UTF-8 text, with very long lines (43001), with no line terminators
Hash 42c3d32863b8b6cebecea53aa7a786e8
5c34ca0281fead501731660588ca0f2c8b5ccda9
2f472251b6b4a4a8d7ceed7539cb6ebea71caf28bccc0beda7a6866a6847b53e
GET /bat.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: private,max-age=1800
content-length: 12469
content-type: application/javascript
content-encoding: gzip
last-modified: Fri, 28 Jul 2023 18:19:39 GMT
accept-ranges: bytes
etag: "806f3b1280c1d91:0"
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: C8B6259B9F324A59A06A5CC160FBE0FD Ref B: OSL30EDGE0117 Ref C: 2023-08-06T15:06:24Z
date: Sun, 06 Aug 2023 15:06:23 GMT
X-Firefox-Spdy: h2
m9m6e2w5.stackpathcdn.com/v2/8dae34bc/main.js
200 OK 42 kB URL GET HTTP/2 m9m6e2w5.stackpathcdn.com/v2/8dae34bc/main.js
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerSectigo Limited
Subject*.stackpathcdn.com
Fingerprint38:AA:81:CC:DE:E0:6C:F9:5D:E6:94:AB:8A:6B:35:4E:0D:43:A0:EF
ValidityThu, 04 May 2023 00:00:00 GMT - Thu, 30 May 2024 23:59:59 GMT
File type C source, ASCII text, with very long lines (65536), with no line terminators
Hash c5dde424148d46c58e82e471f401f61c
cf0a2f42c61e7595b48a622de9cf7d28ab8c9cf7
448df03235eb19732486074d0c7ea14f6cb018c4bf89e55b93a050d92791b69b
GET /v2/8dae34bc/main.js HTTP/1.1
Host: m9m6e2w5.stackpathcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Aug 2023 15:06:24 GMT
content-encoding: gzip
content-length: 41900
content-type: application/javascript; charset=UTF-8
last-modified: Fri, 28 Jul 2023 21:56:45 GMT
accept-ranges: bytes
server: nginx
x-amz-id-2: st1M5pyBpNwhertAGCPugX9V370zmJb6bfrRt1RZ3nA3nlkbypjgMtWaumuIxXccq3m7XXNBWRY=
x-amz-request-id: 4DR8G3AG43792TE5
etag: "dd608b0ba82b7be7b96d4a070049f687"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000, public
access-control-allow-origin: *
x-hello-human: Join the fun! Apply at www.shareaholic.com/jobs
x-hw: 1691334384.cds202.sk1.hn,1691334384.cds220.sk1.c
X-Firefox-Spdy: h2
obs.cheqzone.com/mon
200 OK 0 B IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerZeroSSL
Subject*.cheqzone.com
Fingerprint4D:4A:D9:B4:B5:55:F4:2A:51:11:82:01:09:49:2A:82:E6:0B:44:A5
ValidityWed, 28 Jun 2023 00:00:00 GMT - Tue, 26 Sep 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obs.cheqzone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1801
Origin: https://register.fxtm.info
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Cookie: cg_uuid=c7d5cfb2b509a83ec861673f853ef4ea
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://register.fxtm.info
content-type: application/json
date: Sun, 06 Aug 2023 15:06:24 GMT
content-length: 0
X-Firefox-Spdy: h2
obs.cheqzone.com/mon
200 OK 0 B IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerZeroSSL
Subject*.cheqzone.com
Fingerprint4D:4A:D9:B4:B5:55:F4:2A:51:11:82:01:09:49:2A:82:E6:0B:44:A5
ValidityWed, 28 Jun 2023 00:00:00 GMT - Tue, 26 Sep 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obs.cheqzone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1796
Origin: https://register.fxtm.info
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Cookie: cg_uuid=c7d5cfb2b509a83ec861673f853ef4ea
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://register.fxtm.info
content-type: application/json
date: Sun, 06 Aug 2023 15:06:24 GMT
content-length: 0
X-Firefox-Spdy: h2
i5rwkk4h.micpn.com/p/cp/-1/track.gif?t=1691334382446&mi_u=anon-1691334382446-7688870450&mi_cid=9101&page_title=FXTM%20Gives%20You%20More%20For%20Less&event_type=pageview&cdate=1691334382446&ck=false&anon=true
200 OK 42 B URL GET HTTP/2 i5rwkk4h.micpn.com/p/cp/-1/track.gif?t=1691334382446&mi_u=anon-1691334382446-7688870450&mi_cid=9101&page_title=FXTM%20Gives%20You%20More%20For%20Less&event_type=pageview&cdate=1691334382446&ck=false&anon=true
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerAmazon
Subject*.micpn.com
FingerprintA0:F5:55:7A:A7:CB:6E:94:FE:E9:4F:6C:FA:DB:EC:48:EB:36:F0:AD
ValidityWed, 01 Mar 2023 00:00:00 GMT - Fri, 16 Feb 2024 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /p/cp/-1/track.gif?t=1691334382446&mi_u=anon-1691334382446-7688870450&mi_cid=9101&page_title=FXTM%20Gives%20You%20More%20For%20Less&event_type=pageview&cdate=1691334382446&ck=false&anon=true HTTP/1.1
Host: i5rwkk4h.micpn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 42
x-uuid: 8c9d716f-0dfb-48d1-8608-2067c269ca7c
pragma: no-cache
access-control-expose-headers: X-Error
access-control-allow-origin: https://app.movableink.com
cache-control: no-store, no-cache, must-revalidate, max-age=0,post-check=0, pre-check=0
set-cookie: _mibhv=anon-1691334382446-7688870450_9101; Expires=Mon, 05 Aug 2024 15:06:24 GMT; Path=/; HttpOnly; Secure; SameSite=None;
_midat=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/; HttpOnly; Secure; SameSite=None;
date: Sun, 06 Aug 2023 15:06:24 GMT
x-cache: Miss from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: pq_yDSN9B4ZPyEGLRsw9mfpZrCo6IHvd01tGypHAgecBpKcSvDT_aw==
X-Firefox-Spdy: h2
s.yimg.com/wi/ytc.js
200 OK 6.3 kB IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerDigiCert Inc
Subject*.api.fantasysports.yahoo.com
Fingerprint11:15:A7:FB:E3:2C:83:2D:05:7D:FD:E1:2A:BE:36:EC:ED:E1:87:83
ValidityMon, 03 Jul 2023 00:00:00 GMT - Wed, 23 Aug 2023 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 06394fb155c07d31069ec17d539a0d51
a6485e99234ee49837f765d3386f62b07aed30ae
3108660e1fc1b0b76dd09ce69d37cbce893dbf042ef55e0ad98b930ac3dce7a0
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: 6m5L0v1bDLJROQ/N2UNOB4sIOFrBFpH3BzxyyZaAsSpxzzpRCPYm+T7nHLpj8o3/f9rt+qKVtO8=
x-amz-request-id: SWQ0NN3QZAQAGXSD
date: Sun, 06 Aug 2023 14:57:05 GMT
last-modified: Mon, 26 Jun 2023 09:26:35 GMT
x-amz-expiration: expiry-date="Wed, 31 Jul 2024 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "5c6ed25dce803fd84288922b8928409e-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: xC6OTTJGIjCqkMTkbrZpmtbXHK5oaZhW
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 560
content-encoding: gzip
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
s.yimg.com/wi/config/10133581.json
200 OK 2 B URL GET HTTP/2 s.yimg.com/wi/config/10133581.json
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerDigiCert Inc
Subject*.api.fantasysports.yahoo.com
Fingerprint11:15:A7:FB:E3:2C:83:2D:05:7D:FD:E1:2A:BE:36:EC:ED:E1:87:83
ValidityMon, 03 Jul 2023 00:00:00 GMT - Wed, 23 Aug 2023 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /wi/config/10133581.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://register.fxtm.info
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
x-amz-request-id: 78SYX3RDDDPW131J
x-amz-id-2: QZKORV0ho73xR4WshZ3S7u7DHgOc+AAx7R0rajFN5fd5njKJFdRpMYYNWXlOjNnKkz+xhDD/Sw2PuARP1BRQbA==
content-type: application/json
date: Sun, 06 Aug 2023 14:48:58 GMT
server: ATS
referrer-policy: no-referrer-when-downgrade
cache-control: public,max-age=3600
content-length: 2
age: 1047
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
bat.bing.com/p/action/5152714.js
204 No Content 0 B URL GET HTTP/2 bat.bing.com/p/action/5152714.js
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://register.fxtm.info/switchers/
Certificate IssuerMicrosoft Corporation
Subjectwww.bing.com
FingerprintCD:30:E8:F8:D2:A7:C2:85:A1:F7:A2:2E:B6:B3:FD:F9:08:FA:31:D1
ValidityWed, 26 Jul 2023 23:57:23 GMT - Mon, 22 Jan 2024 23:57:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/action/5152714.js HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
cache-control: private,max-age=1800
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: C5F72DF7978442229FDDBD9C42B77A86 Ref B: OSL30EDGE0117 Ref C: 2023-08-06T15:06:24Z
date: Sun, 06 Aug 2023 15:06:24 GMT
X-Firefox-Spdy: h2
s.yimg.com/wi/ytc.js
200 OK 6.3 kB IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerDigiCert Inc
Subject*.api.fantasysports.yahoo.com
Fingerprint11:15:A7:FB:E3:2C:83:2D:05:7D:FD:E1:2A:BE:36:EC:ED:E1:87:83
ValidityMon, 03 Jul 2023 00:00:00 GMT - Wed, 23 Aug 2023 23:59:59 GMT
File type ASCII text, with very long lines (18187), with no line terminators
Hash 5c6ed25dce803fd84288922b8928409e
3ccc10546ae12f160bacac1e9e422af091ea4a41
480b06b23e574b4bf386fde1a91145a4171f97aeb5ee800e4be1850f29b1ad91
GET /wi/ytc.js HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: 6m5L0v1bDLJROQ/N2UNOB4sIOFrBFpH3BzxyyZaAsSpxzzpRCPYm+T7nHLpj8o3/f9rt+qKVtO8=
x-amz-request-id: SWQ0NN3QZAQAGXSD
date: Sun, 06 Aug 2023 14:57:05 GMT
last-modified: Mon, 26 Jun 2023 09:26:35 GMT
x-amz-expiration: expiry-date="Wed, 31 Jul 2024 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "5c6ed25dce803fd84288922b8928409e-df"
x-amz-server-side-encryption: AES256
cache-control: public,max-age=3600
x-amz-version-id: xC6OTTJGIjCqkMTkbrZpmtbXHK5oaZhW
accept-ranges: bytes
content-type: application/javascript
server: ATS
referrer-policy: no-referrer-when-downgrade
vary: Origin, Accept-Encoding
age: 560
content-encoding: gzip
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.shareaholic.net/config/7bb553f715a185b64e387629db153b8a.json
200 OK 831 B URL GET HTTP/2 www.shareaholic.net/config/7bb553f715a185b64e387629db153b8a.json
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerLet's Encrypt
Subject*.shareaholic.net
Fingerprint79:81:58:AF:21:B6:FB:59:E2:EB:B3:C8:BC:BA:07:0B:94:81:FF:B6
ValidityFri, 04 Aug 2023 00:03:14 GMT - Thu, 02 Nov 2023 00:03:13 GMT
File type JSON data\012- , ASCII text, with very long lines (2287), with no line terminators
Hash 3089fb900da4471eaffc71b01659d372
c3db98417db277f465c5b0656add8c8672c4523b
98f36442d7b084f203822a30b3660b6f48d24cf2900114e3f93ac5095bc1f87e
GET /config/7bb553f715a185b64e387629db153b8a.json HTTP/1.1
Host: www.shareaholic.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://register.fxtm.info
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 05 Aug 2023 18:18:49 GMT
etag: W/"98f36442d7b084f203822a30b3660b6f"
vary: Accept-Encoding
content-encoding: gzip
content-type: application/json
cache-control: max-age=3, public, must-revalidate
x-varnish: 40489254 27036389
via: 1.1 varnish (Varnish/6.0)
access-control-allow-methods: GET, HEAD
access-control-allow-headers: *
access-control-allow-origin: *
access-control-expose-headers: Etag, Access-Control-Allow-Origin, x-client-geo-latlong, x-client-geo-country, x-client-geo-city, x-client-geo-zip, x-client-geo-region, x-client-geo-metrocode
access-control-max-age: 2000
x-client-geo-latlong: 59.945200,10.755900
x-client-geo-country: NO,Norway
x-client-geo-city:
x-client-geo-region:
x-client-geo-metrocode:
x-client-geo-zip:
accept-ranges: bytes
content-length: 831
X-Firefox-Spdy: h2
obs.cheqzone.com/mon
200 OK 0 B IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerZeroSSL
Subject*.cheqzone.com
Fingerprint4D:4A:D9:B4:B5:55:F4:2A:51:11:82:01:09:49:2A:82:E6:0B:44:A5
ValidityWed, 28 Jun 2023 00:00:00 GMT - Tue, 26 Sep 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obs.cheqzone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1796
Origin: https://register.fxtm.info
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Cookie: cg_uuid=c7d5cfb2b509a83ec861673f853ef4ea
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://register.fxtm.info
content-type: application/json
date: Sun, 06 Aug 2023 15:06:26 GMT
content-length: 0
X-Firefox-Spdy: h2
prod.api.adline.com/api/cpa?key=UID-dqT6kOAdKpdkMlkDs5Fs
200 OK 15 kB URL GET HTTP/2 prod.api.adline.com/api/cpa?key=UID-dqT6kOAdKpdkMlkDs5Fs
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerAmazon
Subjectadline.com
Fingerprint22:B0:0E:DA:9B:F7:73:21:4B:C7:C8:F9:A7:96:F4:6A:9F:9C:62:A0
ValidityWed, 03 May 2023 00:00:00 GMT - Fri, 31 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (2446)
Hash 46a4feaca16820af22af1a2cabdef26e
2d6e85ae1c1e86aebcbaf84c55b4cf240463f4e9
20c013ab8ea725b0416a810b7be719a9c7878ef341b6ac4eeabbc3d24c956dd3
GET /api/cpa?key=UID-dqT6kOAdKpdkMlkDs5Fs HTTP/1.1
Host: prod.api.adline.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Aug 2023 15:06:20 GMT
content-type: application/javascript
server: nginx/1.20.2
cache-control: no-cache, private
content-disposition: inline; filename=cpa.js
x-xss-protection: 1; mode=block
content-encoding: br
X-Firefox-Spdy: h2
obs.cheqzone.com/mon
200 OK 0 B IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerZeroSSL
Subject*.cheqzone.com
Fingerprint4D:4A:D9:B4:B5:55:F4:2A:51:11:82:01:09:49:2A:82:E6:0B:44:A5
ValidityWed, 28 Jun 2023 00:00:00 GMT - Tue, 26 Sep 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obs.cheqzone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1817
Origin: https://register.fxtm.info
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Cookie: cg_uuid=c7d5cfb2b509a83ec861673f853ef4ea
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://register.fxtm.info
content-type: application/json
date: Sun, 06 Aug 2023 15:06:27 GMT
content-length: 0
X-Firefox-Spdy: h2
resources.digital-cloud.medallia.eu/wdceu/141328/onsite/generic1690193922067.js
200 OK 85 kB URL GET HTTP/2 resources.digital-cloud.medallia.eu/wdceu/141328/onsite/generic1690193922067.js
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerSSL Corporation
Subject*.digital-cloud.medallia.eu
FingerprintC6:11:73:B1:D9:3C:B4:BC:7F:51:76:A0:F8:11:F0:2A:9F:B6:E0:7D
ValiditySun, 11 Dec 2022 01:49:23 GMT - Thu, 11 Jan 2024 01:49:23 GMT
File type Unicode text, UTF-8 text, with very long lines (21613)
Hash 9a8438e6a8b26e596a865e4bafcf72b4
522553b25ecc20e59e959318fefad5fd5eb4e914
fbe402c44d38b13882e7d99efb619470e9af28dd37cfb9f1aa84df8041e8eded
GET /wdceu/141328/onsite/generic1690193922067.js HTTP/1.1
Host: resources.digital-cloud.medallia.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-amz-id-2: T06qp2B9GjzxGjw2Z0ot148awOUrrkZTzLsjaZ2UTOYrVBKpxY4jwQuIDK9Q9iBW+aThX0ZI1H0=
x-amz-request-id: PEEACH73WCNFQ4C2
last-modified: Mon, 24 Jul 2023 10:18:43 GMT
etag: "9a8438e6a8b26e596a865e4bafcf72b4"
x-amz-server-side-encryption: AES256
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: max-age=31622400
content-encoding: gzip
accept-ranges: bytes
date: Sun, 06 Aug 2023 15:06:27 GMT
via: 1.1 varnish
age: 883567
x-served-by: cache-bma1681-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1691334387.219218,VS0,VE1
vary: Accept-Encoding
strict-transport-security: max-age=31557600
content-length: 84620
X-Firefox-Spdy: h2
ocsps.ssl.com/
1.8 kB IP
Hash a0b2f12b83bcc224d32f7bd31a11aab0
888d8cd72780d72b4731249df5839c9df569d71a
29d110a13825ea3cd9f898bcf682af2a9b30692b6e16e3a8763b682a679c846c
POST / HTTP/1.1
Host: ocsps.ssl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 06 Aug 2023 15:06:27 GMT
Content-Type: application/ocsp-response
Content-Length: 1810
Connection: keep-alive
Expires: Sun, 13 Aug 2023 14:44:12 GMT
Cache-Control: max-age=86400,public,no-transform,must-revalidate
ETag: "888d8cd72780d72b4731249df5839c9df569d71a"
Last-Modified: Sun, 06 Aug 2023 14:44:13 GMT
X-Proxy-Cache: HIT
udc-neb.kampyle.com/egw/5/qceuv8449dzg58ptt1bhda9g8ue19c7s/track/__cool.gif?data=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
200 OK 0 B URL GET HTTP/2 udc-neb.kampyle.com/egw/5/qceuv8449dzg58ptt1bhda9g8ue19c7s/track/__cool.gif?data=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
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerSSL Corporation
Subject*.kampyle.com
Fingerprint38:12:16:65:B3:E4:74:2C:F1:56:DE:7C:79:BF:9A:16:8D:D9:0D:27
ValidityWed, 29 Mar 2023 06:23:12 GMT - Wed, 28 Feb 2024 06:23:12 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /egw/5/qceuv8449dzg58ptt1bhda9g8ue19c7s/track/__cool.gif?data=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 HTTP/1.1
Host: udc-neb.kampyle.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Aug 2023 15:06:27 GMT
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-methods: GET, POST, PUT, DELETE
access-control-allow-headers: X-Requested-With, Origin, Content-Type, Accept
access-control-max-age: 1800
x-me: prod-instance-gatewayservice-green-8c9r
x-application-context: application:9090
content-type: image/gif; charset=UTF-8
content-length: 0
server: Jetty(9.2.11.v20150529)
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
obs.cheqzone.com/mon
200 OK 0 B IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerZeroSSL
Subject*.cheqzone.com
Fingerprint4D:4A:D9:B4:B5:55:F4:2A:51:11:82:01:09:49:2A:82:E6:0B:44:A5
ValidityWed, 28 Jun 2023 00:00:00 GMT - Tue, 26 Sep 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obs.cheqzone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1815
Origin: https://register.fxtm.info
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Cookie: cg_uuid=c7d5cfb2b509a83ec861673f853ef4ea
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://register.fxtm.info
content-type: application/json
date: Sun, 06 Aug 2023 15:06:31 GMT
content-length: 0
X-Firefox-Spdy: h2
obs.cheqzone.com/mon
200 OK 0 B IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerZeroSSL
Subject*.cheqzone.com
Fingerprint4D:4A:D9:B4:B5:55:F4:2A:51:11:82:01:09:49:2A:82:E6:0B:44:A5
ValidityWed, 28 Jun 2023 00:00:00 GMT - Tue, 26 Sep 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obs.cheqzone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1815
Origin: https://register.fxtm.info
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Cookie: cg_uuid=c7d5cfb2b509a83ec861673f853ef4ea
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://register.fxtm.info
content-type: application/json
date: Sun, 06 Aug 2023 15:06:36 GMT
content-length: 0
X-Firefox-Spdy: h2
bat.bing.com/action/0?ti=5152714&tm=gtm002&Ver=2&mid=2185bf2a-9aaf-43ae-b2ad-c15d6f6de3bc&sid=ce1b4880346a11eeb88b499c858a4f82&vid=ce1b65b0346a11ee9c0887c28bca83c5&vids=1&msclkid=N&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=FXTM%20Gives%20You%20More%20For%20Less&p=https%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F&r=<=3652&evt=pageLoad&sv=1&rn=639962
204 No Content 0 B URL GET HTTP/2 bat.bing.com/action/0?ti=5152714&tm=gtm002&Ver=2&mid=2185bf2a-9aaf-43ae-b2ad-c15d6f6de3bc&sid=ce1b4880346a11eeb88b499c858a4f82&vid=ce1b65b0346a11ee9c0887c28bca83c5&vids=1&msclkid=N&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=FXTM%20Gives%20You%20More%20For%20Less&p=https%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F&r=<=3652&evt=pageLoad&sv=1&rn=639962
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Requested by https://register.fxtm.info/switchers/
Certificate IssuerMicrosoft Corporation
Subjectwww.bing.com
FingerprintCD:30:E8:F8:D2:A7:C2:85:A1:F7:A2:2E:B6:B3:FD:F9:08:FA:31:D1
ValidityWed, 26 Jul 2023 23:57:23 GMT - Mon, 22 Jan 2024 23:57:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /action/0?ti=5152714&tm=gtm002&Ver=2&mid=2185bf2a-9aaf-43ae-b2ad-c15d6f6de3bc&sid=ce1b4880346a11eeb88b499c858a4f82&vid=ce1b65b0346a11ee9c0887c28bca83c5&vids=1&msclkid=N&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=FXTM%20Gives%20You%20More%20For%20Less&p=https%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F&r=<=3652&evt=pageLoad&sv=1&rn=639962 HTTP/1.1
Host: bat.bing.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
cache-control: no-cache, must-revalidate
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
set-cookie: MUID=3E24B00F5F3C6B230D7DA36A5EC96A66; domain=.bing.com; expires=Fri, 30-Aug-2024 15:06:24 GMT; path=/; SameSite=None; Secure; Priority=High;
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 3CD99EF30C094ED48F17C4DCF0CDC8DC Ref B: OSL30EDGE0117 Ref C: 2023-08-06T15:06:24Z
date: Sun, 06 Aug 2023 15:06:24 GMT
X-Firefox-Spdy: h2
data.fxtm.info/gtag/js?id=G-Z7G2DXPR5E&l=dataLayer&cx=c&sign=6ee30e55d1ec9088029370fb8bcb809d2f085cfbd0067c7871e5e6f993ffc551_20230806
200 OK 270 kB URL GET HTTP/2 data.fxtm.info/gtag/js?id=G-Z7G2DXPR5E&l=dataLayer&cx=c&sign=6ee30e55d1ec9088029370fb8bcb809d2f085cfbd0067c7871e5e6f993ffc551_20230806
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerGoogle Trust Services LLC
Subjectdata.fxtm.info
FingerprintE1:59:62:CE:7A:D7:20:1A:B6:B3:01:27:C7:83:81:30:66:2D:B7:48
ValidityThu, 20 Jul 2023 13:32:08 GMT - Wed, 18 Oct 2023 14:18:17 GMT
File type ASCII text, with very long lines (5857)
Size 270 kB (269837 bytes)
Hash 9785c15f60b91f41edf3fd141c6a23fe
731a3b0e5d6e3a1630ad3ba1aad51a390ecb2c10
b89b8aaf3a2f808f652aaa507af9fed1bac0444c3bc1ddf3ade40cdbe0fa6d1c
GET /gtag/js?id=G-Z7G2DXPR5E&l=dataLayer&cx=c&sign=6ee30e55d1ec9088029370fb8bcb809d2f085cfbd0067c7871e5e6f993ffc551_20230806 HTTP/1.1
Host: data.fxtm.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Cookie: ubvt=v2%7C1b34664a-636c-4b65-851d-e4924b46917d%7Ce99e679d-5417-4190-b4ce-cd61fd09315e%3Aa%3Asingle; _gcl_au=1.1.595871492.1691334378
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: private, max-age=900
expires: Sun, 06 Aug 2023 15:21:00 GMT
content-type: application/javascript; charset=UTF-8
vary: accept-encoding
content-encoding: gzip
date: Sun, 06 Aug 2023 15:06:19 GMT
server: Google Frontend
X-Firefox-Spdy: h2
rtg.prdredir.com/sync?ref=&lp=https%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F&sh=1024&sw=1280&date=1691334378507&fp=uid-8784389448.9150222786
200 OK 43 B URL GET HTTP/3 rtg.prdredir.com/sync?ref=&lp=https%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F&sh=1024&sw=1280&date=1691334378507&fp=uid-8784389448.9150222786
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerGoogle Trust Services LLC
Subjectprdredir.com
Fingerprint97:E6:8C:C8:2F:07:ED:6C:4F:E6:DE:0B:07:1C:D0:C2:3E:B4:3E:7D
ValidityThu, 06 Jul 2023 07:01:15 GMT - Wed, 04 Oct 2023 07:01:14 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /sync?ref=&lp=https%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F&sh=1024&sw=1280&date=1691334378507&fp=uid-8784389448.9150222786 HTTP/1.1
Host: rtg.prdredir.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 06 Aug 2023 15:06:20 GMT
content-type: image/gif
status: 200 OK
cache-control: no-cache
referrer-policy: strict-origin-when-cross-origin
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
x-request-id: 8db938e1-2dc2-42bd-beaf-1b595af0235e
content-disposition: inline; filename="pixel.gif"
x-download-options: noopen
content-transfer-encoding: binary
x-runtime: 0.001630
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: fp=f3747849-f186-43df-8624-aa6f19e97fc3; domain=prdredir.com; path=/; expires=Mon, 06 Nov 2023 15:06:20 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2yIOc%2BcBe15%2BxhuV1maJ%2BbGfkJWw%2Fq8MgEAg1kCi8diF1TuSItn%2BFH%2FMMOHaI5L8dfCb5z6jXwhP8lbWl5yZ6LJ0ETXKvHw1BgmErfE%2FaKbVRoHWcCYx7WN0npxBl9qEoChF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7f282ee53c197697-LHR
alt-svc: h3=":443"; ma=86400
fonts.ub-assets.com/fonts/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2
200 OK 15 kB URL GET HTTP/2 fonts.ub-assets.com/fonts/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerAmazon
Subjectfonts.ub-assets.com
FingerprintDA:B0:56:6C:D1:26:7A:FA:DF:C5:44:C6:5F:F3:C1:C4:69:F8:5B:B8
ValidityThu, 01 Jun 2023 00:00:00 GMT - Sat, 29 Jun 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 14780, version 1.0\012- data
Hash 8dae809192c44690275a3624133293e7
969c98c4d7eb00386ebbd61a63288972d138ecb8
c3de27b2cbd6deda629c9b442700cf54c0dda74e494b1c75a57d822068a047f8
GET /fonts/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2 HTTP/1.1
Host: fonts.ub-assets.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://register.fxtm.info
DNT: 1
Connection: keep-alive
Referer: https://fonts.ub-assets.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: font/woff2
content-length: 14780
date: Fri, 14 Jul 2023 11:21:57 GMT
x-amzn-requestid: 312c817f-6908-4f13-8592-0b66bfc1f2fd
last-modified: Thu, 01 Jun 2023 22:52:58 GMT
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
x-xss-protection: 0
access-control-allow-origin: *
x-amzn-remapped-content-length: 14780
timing-allow-origin: *
cross-origin-opener-policy: same-origin; report-to="apps-themes"
x-amz-apigw-id: IDRpbEe9oAMFcEA=
cache-control: public, max-age=31536000
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
x-amzn-trace-id: Root=1-64b12fd5-664941dc4563f18619ec2348
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jZleYKSykwab95cyn4KabYJEhQgKUwChys2uXZMihXxIvzwTfa5Knw==
age: 2000663
X-Firefox-Spdy: h2
my.forextime.com/en/identity/registration/assets/img/check.svg
200 OK 314 B URL GET HTTP/3 my.forextime.com/en/identity/registration/assets/img/check.svg
IP
Requested by https://my.forextime.com/en/identity/registration/?theme=&sbt=&abt=&lbt=&sw=&cs=&dlt=&product=trading&origin=https%3A%2F%2Fregister.fxtm.info¤t_url=https://register.fxtm.info/&company=&version=49007&type=new&new-gtm=&disable_web_analytic=true
Certificate IssuerCentralNic Luxembourg Sàrl
Subject*.forextime.com
FingerprintD0:E4:5A:3F:40:96:1E:77:78:0E:76:1C:F2:44:08:B4:CD:B4:2F:91
ValidityFri, 18 Nov 2022 00:00:00 GMT - Sun, 10 Dec 2023 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (340), with no line terminators
Hash d94d695c8d338d0283e3fb195f74168e
fceb738efe0e696b0535e5f598c674433a61c664
6c0d2184e0704f74ff77b53fd7fa6c5149afc404cbf1c008ea9865b046d64375
GET /en/identity/registration/assets/img/check.svg HTTP/1.1
Host: my.forextime.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://my.forextime.com/en/identity/registration/assets/fxLight.g6l4yjyb7tpqxz9qey5jk.css
Cookie: isUnbounceDomain=true; isAllowedDomain=false; company=uk; currentWWWUrl=https://register.fxtm.info/; language=en; origin=https://register.fxtm.info; topUrl=https://register.fxtm.info/; redirect=; redirect_auth=/; redirect_login=; product=trading; country=NO; show_region=uk
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 06 Aug 2023 15:06:21 GMT
content-type: image/svg+xml
last-modified: Fri, 04 Aug 2023 08:25:33 GMT
etag: W/"64ccb5fd-13a"
my-country: NO
content-encoding: gzip
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000
server: cloudflare
cf-ray: 7f282ee8fd7fb4f1-OSL
alt-svc: h3=":443"; ma=86400
www.googletagmanager.com/gtag/js?id=AW-768686761
200 OK 225 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=AW-768686761
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintDD:70:56:93:2B:32:FA:EA:25:D4:3B:17:50:BC:E0:4A:6A:BA:DB:8B
ValidityMon, 10 Jul 2023 08:16:15 GMT - Mon, 02 Oct 2023 08:16:14 GMT
File type ASCII text, with very long lines (4723)
Size 225 kB (224949 bytes)
Hash 6a640d59a34d797af1a002974fddfa42
5e6b2b097cc843f0c9a3017e288b29ce5fd3237d
a74be8d84a85a95e9e16601ed1a3cf1204db733e4208aa6ab401aa04a97bc181
GET /gtag/js?id=AW-768686761 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 06 Aug 2023 15:06:21 GMT
expires: Sun, 06 Aug 2023 15:06:21 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77836
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
resources.digital-cloud.medallia.eu/wdceu/141328/onsite/embed.js
200 OK 1.1 kB URL GET HTTP/2 resources.digital-cloud.medallia.eu/wdceu/141328/onsite/embed.js
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerSSL Corporation
Subject*.digital-cloud.medallia.eu
FingerprintC6:11:73:B1:D9:3C:B4:BC:7F:51:76:A0:F8:11:F0:2A:9F:B6:E0:7D
ValiditySun, 11 Dec 2022 01:49:23 GMT - Thu, 11 Jan 2024 01:49:23 GMT
File type ASCII text, with very long lines (1105), with no line terminators
Hash ef2630b1f709d252a901eaa51231f849
c6d3fb886b37881e13f2e83d23ccd288f36fb9c8
982c14613559224afc723b86d7f18fe0de28e6006f67567adf0da72ec52eeaa7
GET /wdceu/141328/onsite/embed.js HTTP/1.1
Host: resources.digital-cloud.medallia.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: D4IR6zkv1AEamW96yd0d5ltVDAIQRSrlm2OdnTXEP7HKwvH6+AZWeSnrOjbc0rWh/5rwJ0ape8s=
x-amz-request-id: N4MQX0Q7C2ENRTDM
last-modified: Mon, 24 Jul 2023 10:18:43 GMT
etag: "f49d88ccf63bab12b5175fcc40ccb126"
x-amz-server-side-encryption: AES256
content-type: application/javascript
server: AmazonS3
access-control-allow-origin: *
cache-control: max-age=0,must-revalidate
content-encoding: gzip
accept-ranges: bytes
date: Sun, 06 Aug 2023 15:06:27 GMT
via: 1.1 varnish
age: 884077
x-served-by: cache-bma1681-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1691334387.142098,VS0,VE1
vary: Accept-Encoding
strict-transport-security: max-age=31557600
content-length: 528
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/c9cf1330-banner-switchers-non-compliant.jpg
200 OK 85 kB URL GET HTTP/2 d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/c9cf1330-banner-switchers-non-compliant.jpg
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1700x544, components 3\012- data
Hash 5e40d02dcfaf29319938683aa2f2f56e
29f4e77e0e24dd7cf1678acd78ae22a736f2e9d7
d825c028696c7bf579a6184e203569567c4402d1ae7a33f3ae497f3b61c08178
GET /register.fxtm.info/switchers/c9cf1330-banner-switchers-non-compliant.jpg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
content-length: 84824
date: Sat, 29 Jul 2023 08:17:27 GMT
last-modified: Wed, 29 Mar 2023 08:41:45 GMT
etag: "5e40d02dcfaf29319938683aa2f2f56e"
x-amz-server-side-encryption: AES256
cache-control: max-age=31557600
x-amz-version-id: tYxWzR.KFGvFxUBE.b19twZNteC7_8i5
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ySYihTS7RYRqgi38MTGE8XTWg4PlhAX65Y5VgrFYDVmpw4JpP2tfcw==
age: 715733
X-Firefox-Spdy: h2
s.yimg.com/wi/config/10097064.json
200 OK 46 B URL GET HTTP/2 s.yimg.com/wi/config/10097064.json
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerDigiCert Inc
Subject*.api.fantasysports.yahoo.com
Fingerprint11:15:A7:FB:E3:2C:83:2D:05:7D:FD:E1:2A:BE:36:EC:ED:E1:87:83
ValidityMon, 03 Jul 2023 00:00:00 GMT - Wed, 23 Aug 2023 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 34242317f03bb0e837737b20ba088c50
5b4754aa32ec6b00bd4b22e1b1411860a8934ed8
3d74342410069feaa4291d98177421489168a987345d1d81088cf049a5e94c8e
GET /wi/config/10097064.json HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://register.fxtm.info
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: +D3oTmHNHbYJ9xpmikAfH3d4BVZMyE/PfcBTtqZvWLrvtmDk4E5+t+FlnsA0XIueGwXgbww2c0g=
x-amz-request-id: 78SJ1B6GF1Z46GZJ
date: Sun, 06 Aug 2023 14:48:59 GMT
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
last-modified: Fri, 30 Jun 2023 21:57:20 GMT
x-amz-expiration: expiry-date="Sun, 04 Aug 2024 00:00:00 GMT", rule-id="oath-standard-lifecycle"
etag: "2818f7c1d0a6c6df2bab1d3d6344fd8a"
x-amz-server-side-encryption: AES256
x-amz-version-id: ILIYs3_SJPzycdglh5_.XLKt1sqo1Noy
accept-ranges: bytes
content-type: application/json
server: ATS
content-length: 46
referrer-policy: no-referrer-when-downgrade
age: 1046
strict-transport-security: max-age=31536000
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ob.cheqzone.com/clicktrue_invocation.js?id=11463
200 OK 95 kB URL GET HTTP/2 ob.cheqzone.com/clicktrue_invocation.js?id=11463
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerAmazon
Subject*.cheqzone.com
Fingerprint44:59:50:4A:78:F8:B9:37:0D:71:B8:21:79:01:B5:40:75:A7:47:FA
ValidityWed, 22 Feb 2023 00:00:00 GMT - Sun, 21 Jan 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /clicktrue_invocation.js?id=11463 HTTP/1.1
Host: ob.cheqzone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 34490
content-encoding: gzip
server: Caddy
date: Sun, 06 Aug 2023 06:56:34 GMT
cache-control: max-age=43200
expires: Sun, 06 Aug 2023 18:56:32 GMT
etag: "17350-NlJYt1Il0vUhdrLmbM2hOBWrNeM"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: woqflUsHijmeS4xC2LoqB6FQHrr7PQOHqRbW25mR2NP33xxEj5at0A==
age: 29388
X-Firefox-Spdy: h2
data.fxtm.info/g/collect?v=2&tid=G-Z7G2DXPR5E>m=45he3820&_p=1617848251&cid=1652822685.1691334378&ul=en-us&sr=1280x1024&_fplc=0&sst.uc=&sst.gse=1&_s=2&sid=1691334378&sct=1&seg=0&dl=https%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F&dt=FXTM%20Gives%20You%20More%20For%20Less&en=viewed_fxtm_landing_page&ep.Page%20Hostname=register.fxtm.info&ep.Page%20Path=%2Fswitchers%2F&ep.Page%20URL=https%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F&ep.Referrer=&ep.Is%20Unbounce%3F=true&ep.content_group=Unallocated&ep.GTM%20SS%20Domain=https%3A%2F%2Fdata.fxtm.info&ep.Domain%20Region=global&ep.document_referrer=&ep.gtm_debug_mode=false&ep.timestamp=2023-08-06T15%3A06%3A18.81%2B00%3A00&ep.gtm_version=113&ep.domain_region=global&ep.user_data._tag_mode=CODE&richsstsse
200 OK 65 B URL GET HTTP/2 data.fxtm.info/g/collect?v=2&tid=G-Z7G2DXPR5E>m=45he3820&_p=1617848251&cid=1652822685.1691334378&ul=en-us&sr=1280x1024&_fplc=0&sst.uc=&sst.gse=1&_s=2&sid=1691334378&sct=1&seg=0&dl=https%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F&dt=FXTM%20Gives%20You%20More%20For%20Less&en=viewed_fxtm_landing_page&ep.Page%20Hostname=register.fxtm.info&ep.Page%20Path=%2Fswitchers%2F&ep.Page%20URL=https%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F&ep.Referrer=&ep.Is%20Unbounce%3F=true&ep.content_group=Unallocated&ep.GTM%20SS%20Domain=https%3A%2F%2Fdata.fxtm.info&ep.Domain%20Region=global&ep.document_referrer=&ep.gtm_debug_mode=false&ep.timestamp=2023-08-06T15%3A06%3A18.81%2B00%3A00&ep.gtm_version=113&ep.domain_region=global&ep.user_data._tag_mode=CODE&richsstsse
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerGoogle Trust Services LLC
Subjectdata.fxtm.info
FingerprintE1:59:62:CE:7A:D7:20:1A:B6:B3:01:27:C7:83:81:30:66:2D:B7:48
ValidityThu, 20 Jul 2023 13:32:08 GMT - Wed, 18 Oct 2023 14:18:17 GMT
File type ASCII text, with no line terminators
Hash 09e2b0b335a8a3fe7af59bc95afb7805
ce618c52e5e3e2e4d0151e76c21f4df73d1ee9c5
ad1d4f9f8632a757694e89ac2387e5719b475b295a228ed119e49a809f86f476
GET /g/collect?v=2&tid=G-Z7G2DXPR5E>m=45he3820&_p=1617848251&cid=1652822685.1691334378&ul=en-us&sr=1280x1024&_fplc=0&sst.uc=&sst.gse=1&_s=2&sid=1691334378&sct=1&seg=0&dl=https%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F&dt=FXTM%20Gives%20You%20More%20For%20Less&en=viewed_fxtm_landing_page&ep.Page%20Hostname=register.fxtm.info&ep.Page%20Path=%2Fswitchers%2F&ep.Page%20URL=https%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F&ep.Referrer=&ep.Is%20Unbounce%3F=true&ep.content_group=Unallocated&ep.GTM%20SS%20Domain=https%3A%2F%2Fdata.fxtm.info&ep.Domain%20Region=global&ep.document_referrer=&ep.gtm_debug_mode=false&ep.timestamp=2023-08-06T15%3A06%3A18.81%2B00%3A00&ep.gtm_version=113&ep.domain_region=global&ep.user_data._tag_mode=CODE&richsstsse HTTP/1.1
Host: data.fxtm.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://register.fxtm.info
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Cookie: ubvt=v2%7C1b34664a-636c-4b65-851d-e4924b46917d%7Ce99e679d-5417-4190-b4ce-cd61fd09315e%3Aa%3Asingle; _gcl_au=1.1.595871492.1691334378; _rdt_uuid=1691334378315.ec58d21b-21e3-4e37-97be-c941ef917431; _ga_Z7G2DXPR5E=GS1.1.1691334378.1.0.1691334378.0.0.0; _ga=GA1.1.1652822685.1691334378; FPLC=4THOxXLEv4pV8egjHBDAVkim6qpsIJhFeLUPOamyAg9BoySfL1BQhr%2F0cPmvYSqYQ%2FkcmoFOV%2FPCbbQ%2FEGGBUG57nlN%2FOFD%2BqrE4kAScq0GSEtHECQ7fNudu8Gq3wg%3D%3D; FPID=FPID2.2.TIIqiEj9c%2BKXwR%2FV%2B%2FQvEw5jlWXSxZ64Z8q4aF8JP%2Bw%3D.1691334378; FPAU=1.1.595871492.1691334378; _cq_duid=1.1691334378.ksdIztKOrBE8f2Ga; _cq_suid=1.1691334378.3RMvLRT2YdLU1ZSi; _ga_backup=GA1.1.1652822685.1691334378
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
set-cookie: FPLC=sCm8Xz8ZxrcM%2FYvrrr9gDCtJR0QwAFL0mm7A6fnEEB75gXdbAmqt23uiVRyxYGczq4Fk5emT5v4%2FzVDLBAGsoPMH3JrwBRCvLO2%2Flc9YYvdOCUr%2Fu%2F2s%2BkxlAAfppg%3D%3D; Max-Age=72000; Domain=fxtm.info; Path=/; Secure
FPID=FPID2.2.TIIqiEj9c%2BKXwR%2FV%2B%2FQvEw5jlWXSxZ64Z8q4aF8JP%2Bw%3D.1691334378; Max-Age=63072000; Domain=fxtm.info; Path=/; Secure; HttpOnly
FPAU=1.1.595871492.1691334378; Max-Age=7775997; Domain=fxtm.info; Path=/; Secure
cache-control: no-cache
content-type: text/plain
x-content-type-options: nosniff
x-accel-buffering: no
access-control-allow-origin: https://register.fxtm.info
access-control-allow-credentials: true
date: Sun, 06 Aug 2023 15:06:21 GMT
server: Google Frontend
expires: Sun, 06 Aug 2023 15:06:21 GMT
X-Firefox-Spdy: h2
my.forextime.com/api/sites/default/files/translations/mobile-reg/en-uk.json
200 OK 15 kB URL GET HTTP/3 my.forextime.com/api/sites/default/files/translations/mobile-reg/en-uk.json
IP
Requested by https://my.forextime.com/en/identity/registration/?theme=&sbt=&abt=&lbt=&sw=&cs=&dlt=&product=trading&origin=https%3A%2F%2Fregister.fxtm.info¤t_url=https://register.fxtm.info/&company=&version=49007&type=new&new-gtm=&disable_web_analytic=true
Certificate IssuerCentralNic Luxembourg Sàrl
Subject*.forextime.com
FingerprintD0:E4:5A:3F:40:96:1E:77:78:0E:76:1C:F2:44:08:B4:CD:B4:2F:91
ValidityFri, 18 Nov 2022 00:00:00 GMT - Sun, 10 Dec 2023 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (15268), with no line terminators
Hash 894c3d5870e5f646ac4e7236e7c57d82
368b33aa02d88dd45b02fc835bb077f68d50ce9c
84071033670590624ae9dd8ce8c19aabbbc411f534bcdf647ae60c903cf09fcc
GET /api/sites/default/files/translations/mobile-reg/en-uk.json HTTP/1.1
Host: my.forextime.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://my.forextime.com/en/identity/registration/?theme=&sbt=&abt=&lbt=&sw=&cs=&dlt=&product=trading&origin=https%3A%2F%2Fregister.fxtm.info¤t_url=https://register.fxtm.info/&company=&version=49007&type=new&new-gtm=&disable_web_analytic=true
Cookie: isUnbounceDomain=true; isAllowedDomain=false; company=uk; currentWWWUrl=https://register.fxtm.info/; language=en; origin=https://register.fxtm.info; topUrl=https://register.fxtm.info/; redirect=; redirect_auth=/; redirect_login=; product=trading; country=NO
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 06 Aug 2023 15:06:20 GMT
content-type: application/json
last-modified: Thu, 03 Aug 2023 09:29:01 GMT
etag: W/"3ba4-6020169138d43"
content-encoding: gzip
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000
server: cloudflare
cf-ray: 7f282ee6fb3fb4f1-OSL
alt-svc: h3=":443"; ma=86400
obs.cheqzone.com/ct?id=11463&url=https%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F&sf=0&tpi=&ch=&uvid=&tsf=0&tsfmi=&tsfu=&cb=1691334378781&hl=4&op=0&ag=585317903&rand=24699260760527882802070606085116102780681107825909501090076510507726612992221247&fs=1280x1024&fst=1280x1024&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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%3D%3D&dep=0&pre=0&sdd=%7B%7D&cri=B2bxpRjVle&pto=2206&ver=55&gac=1652822685.1691334378&mei=&ap=&fe=1&duid=1.1691334378.ksdIztKOrBE8f2Ga&suid=1.1691334378.3RMvLRT2YdLU1ZSi&tuid=1.1691334378.CeRDNZAAGIi06zNZ&fbc=->m=WyJwYWdlX3ZpZXciXQ%3D%3D&it=26%2C1558%2C156&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=-&spa=1&urid=0
200 OK 3.0 kB URL GET HTTP/2 obs.cheqzone.com/ct?id=11463&url=https%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F&sf=0&tpi=&ch=&uvid=&tsf=0&tsfmi=&tsfu=&cb=1691334378781&hl=4&op=0&ag=585317903&rand=24699260760527882802070606085116102780681107825909501090076510507726612992221247&fs=1280x1024&fst=1280x1024&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=W1siZWYiLDYwMF0sWzEyLCJ7XCJlXCI6MCxcIndnbFwiOjF9Il0sWyJjYiIsIjEsMCwwLDAsMCwxLDAsMCwwLDQsOTksMSwxLDAsMSwzLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwxLDAsMCwwLDAsMSwwLDAsMCw3LDEsMCwwLDAsMCwxLDMsMSwwLDAsMCwwLDAsMSwwLDAsMSwwLDAsMSwwLDAsMCwwLDAsMCwwLDAsMCwxLDAsMCwwLDAsMCwxLDAsMCwwLDAsMCwwLDAiXSxbLTEsIkxpbnV4IHg4Nl82NCJdLFstMiwiMTAsSXNOOW5HbldiQVlBSXhOZlFhT3FHRTBDRkFRc2NHMDBJbmhPYllCQUtZVU96UU82RVgwMjBJbUdMY3U2MnVyZFAvYzJkMnBObVZaQXdmMy8vOHo3OUdySGExV3UzT21YUFB2ZSJdLFstMywiW1wiaW50ZXJuYWwtcGRmLXZpZXdlclwiLFwiaW50ZXJuYWwtcGRmLXZpZXdlclwiLFwiaW50ZXJuYWwtcGRmLXZpZXdlclwiLFwiaW50ZXJuYWwtcGRmLXZpZXdlclwiLFwiaW50ZXJuYWwtcGRmLXZpZXdlclwiXSJdLFstNCwiLSJdLFstNSwiLSJdLFstNiwie1wid1wiOltcIjBcIixcInViXCIsXCJtb2R1bGVcIixcImRhdGFMYXllclwiLFwiZ29vZ2xlX3RhZ19tYW5hZ2VyXCIsXCJnb29nbGVfdGFnX2RhdGFcIixcImdvb2dsZV9vcHRpbWl6ZVwiLFwicGFzc1V0bURhdGFcIixcIk5vdGlmeVBhaW50RXZlbnRcIixcInBvc3RzY3JpYmVcIixcImdvb2dsZV90YWdfbWFuYWdlcl9leHRlcm5hbFwiLFwic2V0SW1tZWRpYXRlXCIsXCJjbGVhckltbWVkaWF0ZVwiLFwiVmltZW9QbGF5ZXJSZXNpemVFbWJlZHNfXCIsXCJVbmJvdW5jZVNub3dwbG93TmFtZXNwYWNlXCIsXCJ1YlNub3dwbG93XCIsXCJHb29nbGVBbmFseXRpY3NPYmplY3RcIixcImdhXCIsXCJ0d3FcIixcInJkdFwiLFwiX190ZmFfcGl4ZWxfaW5pdFwiLFwiX3RmYVwiLFwib25Zb3VUdWJlSWZyYW1lQVBJUmVhZHlcIixcImZiQXN5bmNJbml0XCIsXCJvYkFwaVwiLFwiX2xpbmtlZGluX3BhcnRuZXJfaWRcIixcIl9saW5rZWRpbl9kYXRhX3BhcnRuZXJfaWRzXCIsXCJsaW50cmtcIixcIlRpa3Rva0FuYWx5dGljc09iamVjdFwiLFwidHRxXCIsXCJmYnFcIixcIl9mYnFcIixcImFkcm9sbF9hZHZfaWRcIixcImFkcm9sbF9waXhfaWRcIixcImFkcm9sbF92ZXJzaW9uXCIsXCJfX2Fkcm9sbF9sb2FkZWRcIixcImFkcm9sbFwiLFwibG9hZFNjcmlwdFwiLFwiY29uZmlnQXJnc1wiLFwicGl4ZWxSYXRpb1wiLFwid2lkdGhcIixcImhlaWdodFwiLFwic2NyZWVuU2l6ZVwiLFwibGFiZWxzXCIsXCJpXCIsXCJnYUdsb2JhbFwiLFwiX19jdGNnX2N0XzExNDYzX2V4ZWNcIl0sXCJuXCI6W10sXCJkXCI6W119Il0sWy03LCItIl0sWy04LCItIl0sWy05LCIrIl0sWy0xMCwiLSJdLFstMTEsIntcInRcIjpcIlwiLFwibVwiOltcImtleXdvcmRzXCIsXCJkZXNjcmlwdGlvblwiLFwib2c6dGl0bGVcIl19Il0sWy0xMiwiXCIxXCIiXSxbLTEzLCItIl0sWy0xNCwiLSJdLFstMTUsIi0iXSxbLTE2LCIwIl0sWy0xNywiNDgiXSxbLTE4LCJbMSwwLDAsMF0iXSxbLTE5LCJbMCwwLDAsMCwwLDAsMSwyNCwyNCxcIi1cIiwxMjgwLDEwMjQsMTI4MCwxMDI0LDEyODAsMTAyNCwxMjgwLDEwMjQsMCwwLDAsMCxcIi1cIixcIi1cIiwxMjgwLDEwMjRdIl0sWy0yMCwiMTY1MjgyMjY4NS4xNjkxMzM0Mzc4Il0sWy0yMSwiLSJdLFstMjIsIltcIm5cIixcIm5cIl0iXSxbLTIzLCIrIl0sWy0yNCwiW10iXSxbLTI1LCItIl0sWy0yNiwiLSJdLFstMjcsIi0iXSxbLTI4LCJlbi1VUyxlbiJdLFstMjksIi0iXSxbLTMwLCJbXCJ2XCIsMF0iXSxbLTMxLCJmYWxzZSJdLFstMzIsIjAiXSxbLTMzLCItIl0sWy0zNCwiLSJdLFstMzUsIlsxNjkxMzM0Mzc4Njk3LDBdIl0sWy0zNiwiW1wiNS80XCIsXCI1LzRcIl0iXSxbLTM3LCItIl0sWy0zOCwiaSwtMSwtMSw0NSwwLDMsMCw1LDE5NSw2MSwtMSwwLCwxMjI1LDIxMjIsMjEyMiJdLFstMzksIltcIjIwMTAwMTAxXCIsMixcIkdlY2tvXCIsXCJOZXRzY2FwZVwiLFwiTW96aWxsYVwiLFwiMjAxODEwMDEwMDAwMDBcIixudWxsLGZhbHNlLG51bGwsZmFsc2UsbnVsbCw1LHRydWUsZmFsc2VdIl0sWy00MCwiMzciXSxbLTQxLCItIl0sWy00MiwiODgzMzk5MDE2Il0sWy00MywiMDAwMDAwMDEwMDAwMDAwMDAwMTExMDAxMDAwMDAxMDAwMDAwMCJdLFstNDQsIjAsNSwwLDUiXSxbLTQ1LCI3NTIsMCwwLDcxOSwwLDAsNzYxLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAiXSxbLTQ2LCIwIl0sWy00NywiVVRDLGVuLVVTLGxhdG4sZ3JlZ29yeSJdLFstNDgsIjAsMCJdLFstNDksIi0iXSxbLTUwLCItIl0sWy01MSwiLSJdLFstNTIsIi0iXSxbLTUzLCIwMDEiXSxbLTU0LCJ7XCJoXCI6W1wiMzI5OTcyODQ1MlwiLFwiODIyODIzMTE5XCIsXCJfMVwiLFwiMTY0MTY4NzM3NFwiXSxcImRcIjpbXSxcImJcIjpbXCJfMVwiLFwiNDI4ODgxMTk4OFwiXSxcInNcIjoxfSJdLFstNTUsIjEiXSxbLTU2LCJsYW5kc2NhcGUtcHJpbWFyeSJdLFstNTcsIlRSZGNRVWxXUzAxS2VWRk5UVWxLQXhZV1Zsc1hXbEZjU0VOV1Yxd1hXbFpVRmxwVlVGcFNUVXRNWEdaUVYwOVdXbGhOVUZaWEYxTktCbEJkQkFnSURROEtBd2dERHd3TkR3c1ZhWGxSVFUxSlNnTVdGbFpiRjFwUlhFaERWbGRjRjFwV1ZCWmFWVkJhVWsxTFRGeG1VRmRQVmxwWVRWQldWeGRUU2daUVhRUUlDQTBQQ2dNSUF3c0FEZ3NBRlhWNVVVMU5TVW9ERmhaV1d4ZGFVVnhJUTFaWFhCZGFWbFFXV2xWUVdsSk5TMHhjWmxCWFQxWmFXRTFRVmxjWFUwb0dVRjBFQ0FnTkR3b0RDQU1LQ1FFSkNoVjVVVTFOU1VvREZoWldXeGRhVVZ4SVExWlhYQmRhVmxRV1dsVlFXbEpOUzB4Y1psQlhUMVphV0UxUVZsY1hVdz09Il0sWy01OCwiLSJdLFstNTksImRlZmF1bHQiXSxbLTYwLCItIl0sWy02MSwiLSJdLFsiZGRiIiwiMSwxMCwwLDMsMSwzLDAsMCwwLDAsMywwLDAsMCwzLDAsMiwwLDEsMCwwLDAsMCwwLDEsMCwwLDAsMCwwLDAsMiwwLDAsMCwyLDAsMSwwLDAsMCwwLDIsMSw0NCwwLDI1LDEsMSwwLDAsMCwxLDAsMCwwLDEsMSwwLDAsMCJdLFsiYm5jaCIsMjQ2XSxbImFibmNoIiwyNDZdXQ%3D%3D&dep=0&pre=0&sdd=%7B%7D&cri=B2bxpRjVle&pto=2206&ver=55&gac=1652822685.1691334378&mei=&ap=&fe=1&duid=1.1691334378.ksdIztKOrBE8f2Ga&suid=1.1691334378.3RMvLRT2YdLU1ZSi&tuid=1.1691334378.CeRDNZAAGIi06zNZ&fbc=->m=WyJwYWdlX3ZpZXciXQ%3D%3D&it=26%2C1558%2C156&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=-&spa=1&urid=0
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerZeroSSL
Subject*.cheqzone.com
Fingerprint4D:4A:D9:B4:B5:55:F4:2A:51:11:82:01:09:49:2A:82:E6:0B:44:A5
ValidityWed, 28 Jun 2023 00:00:00 GMT - Tue, 26 Sep 2023 23:59:59 GMT
File type ASCII text, with very long lines (2996), with no line terminators
Hash 4d5fe676a1d3fb0aedda72d5233a7c0f
ee171637b52cfe15abf33216a0fcece48dab748c
a40ad60c8727d0d7598a73a91c62dd3057f2ca28cb4098de8be90726cf399306
GET /ct?id=11463&url=https%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F&sf=0&tpi=&ch=&uvid=&tsf=0&tsfmi=&tsfu=&cb=1691334378781&hl=4&op=0&ag=585317903&rand=24699260760527882802070606085116102780681107825909501090076510507726612992221247&fs=1280x1024&fst=1280x1024&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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%3D%3D&dep=0&pre=0&sdd=%7B%7D&cri=B2bxpRjVle&pto=2206&ver=55&gac=1652822685.1691334378&mei=&ap=&fe=1&duid=1.1691334378.ksdIztKOrBE8f2Ga&suid=1.1691334378.3RMvLRT2YdLU1ZSi&tuid=1.1691334378.CeRDNZAAGIi06zNZ&fbc=->m=WyJwYWdlX3ZpZXciXQ%3D%3D&it=26%2C1558%2C156&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=-&spa=1&urid=0 HTTP/1.1
Host: obs.cheqzone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
content-type: text/javascript
date: Sun, 06 Aug 2023 15:06:21 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
set-cookie: cg_uuid=c7d5cfb2b509a83ec861673f853ef4ea; Max-Age=29030400; Path=/; Expires=Sun, 07 Jul 2024 15:06:21 GMT; HttpOnly; Secure; SameSite=None
content-length: 1020
X-Firefox-Spdy: h2
data.fxtm.info/_set_cookie?val=U1Cj4LcHOKnJz8eD4jmIUDcje7UeLmKLPMRiCHSpLBM%2BkfIQnl%2FFb9RwS38WaHLxTYmtTgVESiNQrhsIEN7kH%2FZOySs%2B7UI47svUxrb%2FGTrJFsbtoSoaHyB35JEZABqrh4MGfA8Mijd1FuQCcFmw4XoVDR8RjS4whrJSpnF%2FEy53O6UZfj0AjYK5wjjqFvy1lVQ%3D
200 OK 0 B URL GET HTTP/2 data.fxtm.info/_set_cookie?val=U1Cj4LcHOKnJz8eD4jmIUDcje7UeLmKLPMRiCHSpLBM%2BkfIQnl%2FFb9RwS38WaHLxTYmtTgVESiNQrhsIEN7kH%2FZOySs%2B7UI47svUxrb%2FGTrJFsbtoSoaHyB35JEZABqrh4MGfA8Mijd1FuQCcFmw4XoVDR8RjS4whrJSpnF%2FEy53O6UZfj0AjYK5wjjqFvy1lVQ%3D
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerGoogle Trust Services LLC
Subjectdata.fxtm.info
FingerprintE1:59:62:CE:7A:D7:20:1A:B6:B3:01:27:C7:83:81:30:66:2D:B7:48
ValidityThu, 20 Jul 2023 13:32:08 GMT - Wed, 18 Oct 2023 14:18:17 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_set_cookie?val=U1Cj4LcHOKnJz8eD4jmIUDcje7UeLmKLPMRiCHSpLBM%2BkfIQnl%2FFb9RwS38WaHLxTYmtTgVESiNQrhsIEN7kH%2FZOySs%2B7UI47svUxrb%2FGTrJFsbtoSoaHyB35JEZABqrh4MGfA8Mijd1FuQCcFmw4XoVDR8RjS4whrJSpnF%2FEy53O6UZfj0AjYK5wjjqFvy1lVQ%3D HTTP/1.1
Host: data.fxtm.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Cookie: ubvt=v2%7C1b34664a-636c-4b65-851d-e4924b46917d%7Ce99e679d-5417-4190-b4ce-cd61fd09315e%3Aa%3Asingle; _gcl_au=1.1.595871492.1691334378; _rdt_uuid=1691334378315.ec58d21b-21e3-4e37-97be-c941ef917431; _ga_Z7G2DXPR5E=GS1.1.1691334378.1.0.1691334378.0.0.0; _ga=GA1.1.1652822685.1691334378; FPLC=4THOxXLEv4pV8egjHBDAVkim6qpsIJhFeLUPOamyAg9BoySfL1BQhr%2F0cPmvYSqYQ%2FkcmoFOV%2FPCbbQ%2FEGGBUG57nlN%2FOFD%2BqrE4kAScq0GSEtHECQ7fNudu8Gq3wg%3D%3D; FPID=FPID2.2.TIIqiEj9c%2BKXwR%2FV%2B%2FQvEw5jlWXSxZ64Z8q4aF8JP%2Bw%3D.1691334378; FPAU=1.1.595871492.1691334378; _cq_duid=1.1691334378.ksdIztKOrBE8f2Ga; _cq_suid=1.1691334378.3RMvLRT2YdLU1ZSi
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
set-cookie: _ga_backup=GA1.1.1652822685.1691334378; Max-Age=63072000; Domain=fxtm.info; Path=/; SameSite=Lax; Secure
content-type: image/gif
date: Sun, 06 Aug 2023 15:06:20 GMT
server: Google Frontend
expires: Sun, 06 Aug 2023 15:06:20 GMT
cache-control: private
X-Firefox-Spdy: h2
scripts.prdredir.com/scripts/k_fxtm.js
200 OK 1.7 kB URL GET HTTP/2 scripts.prdredir.com/scripts/k_fxtm.js
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerGoogle Trust Services LLC
Subjectprdredir.com
Fingerprint97:E6:8C:C8:2F:07:ED:6C:4F:E6:DE:0B:07:1C:D0:C2:3E:B4:3E:7D
ValidityThu, 06 Jul 2023 07:01:15 GMT - Wed, 04 Oct 2023 07:01:14 GMT
File type ASCII text, with very long lines (1754), with no line terminators
Hash b157b7d023fc8a1f0add994be9d92131
aa1e2ee7d8a3c6ae1d62a32009e89ea175f6dba5
264eff5d2dd56aad451d6eb6aacc0610cb404bada75f37e32270faf4146c41df
GET /scripts/k_fxtm.js HTTP/1.1
Host: scripts.prdredir.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Aug 2023 15:06:20 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
status: 200 OK
cache-control: no-cache
access-control-allow-origin: *
x-request-id: 2977c7c3-05fd-4a3c-86ee-67f430aa5202
etag: W/"448d305ad6e8d6b57c5e4d37afbf26c7"
x-runtime: 0.009090
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=T%2B%2BpXiKtJiObDQYx9GQho4jvK2kckmDcdIiHkN5d%2FP6wbCd6J%2FE25U%2FkSSSXCLrX6MhWMBIM8z8RqUBQIE6PXA%2BSqO%2FQLQsd5fZssZP3NKoEEGbrnUECnOVTTP3pl9ee6ou8WYZHfw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7f282ee36d4988a7-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.ub-assets.com/fonts/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2
200 OK 15 kB URL GET HTTP/2 fonts.ub-assets.com/fonts/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerAmazon
Subjectfonts.ub-assets.com
FingerprintDA:B0:56:6C:D1:26:7A:FA:DF:C5:44:C6:5F:F3:C1:C4:69:F8:5B:B8
ValidityThu, 01 Jun 2023 00:00:00 GMT - Sat, 29 Jun 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 14712, version 1.0\012- data
Hash 3afeae0d768769f5e5f30ac9805c5b70
3ada17c2b462db3e7a1fd85c3f4670dfe7704f4d
0d0a6262c545e8bbc895116e5afb22579c468d7abb77e378f377d6fed57c1dce
GET /fonts/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2 HTTP/1.1
Host: fonts.ub-assets.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://register.fxtm.info
DNT: 1
Connection: keep-alive
Referer: https://fonts.ub-assets.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: font/woff2
content-length: 14712
date: Tue, 06 Jun 2023 18:28:17 GMT
x-amzn-requestid: 62384834-eefc-4ded-a280-ead0e11a3d7e
last-modified: Thu, 01 Jun 2023 22:52:57 GMT
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
x-xss-protection: 0
access-control-allow-origin: *
x-amzn-remapped-content-length: 14712
timing-allow-origin: *
cross-origin-opener-policy: same-origin; report-to="apps-themes"
x-amz-apigw-id: GHAeVGcWIAMFcwA=
cache-control: public, max-age=31536000
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
x-amzn-trace-id: Root=1-647f7ac1-60e0fcd4429c4d1859d0921a
x-cache: Hit from cloudfront
via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: UpnzZiskQZ5I2NvBwn8I9zQlwDE8TRyLppyQXr5U43ABkhijg6GOyQ==
age: 5258282
X-Firefox-Spdy: h2
my.forextime.com/en/identity/registration/assets/img/alpari-arrow-down.svg
200 OK 499 B URL GET HTTP/3 my.forextime.com/en/identity/registration/assets/img/alpari-arrow-down.svg
IP
Requested by https://my.forextime.com/en/identity/registration/?theme=&sbt=&abt=&lbt=&sw=&cs=&dlt=&product=trading&origin=https%3A%2F%2Fregister.fxtm.info¤t_url=https://register.fxtm.info/&company=&version=49007&type=new&new-gtm=&disable_web_analytic=true
Certificate IssuerCentralNic Luxembourg Sàrl
Subject*.forextime.com
FingerprintD0:E4:5A:3F:40:96:1E:77:78:0E:76:1C:F2:44:08:B4:CD:B4:2F:91
ValidityFri, 18 Nov 2022 00:00:00 GMT - Sun, 10 Dec 2023 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (539), with no line terminators
Hash 2dbce4d1777c960529fbb3f939404cd1
3bbf6410c63f52cb890f772c38a03b6d96baae80
66ffb088f043521835007d2072eac6750539b6dec4f9a849ea9e04bfe39ba35b
GET /en/identity/registration/assets/img/alpari-arrow-down.svg HTTP/1.1
Host: my.forextime.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://my.forextime.com/en/identity/registration/assets/fxLight.g6l4yjyb7tpqxz9qey5jk.css
Cookie: isUnbounceDomain=true; isAllowedDomain=false; company=uk; currentWWWUrl=https://register.fxtm.info/; language=en; origin=https://register.fxtm.info; topUrl=https://register.fxtm.info/; redirect=; redirect_auth=/; redirect_login=; product=trading; country=NO
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 06 Aug 2023 15:06:21 GMT
content-type: image/svg+xml
last-modified: Fri, 04 Aug 2023 08:25:33 GMT
etag: W/"64ccb5fd-1f3"
my-country: NO
content-encoding: gzip
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000
server: cloudflare
cf-ray: 7f282ee8bd38b4f1-OSL
alt-svc: h3=":443"; ma=86400
d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/54c4288e-path-86243.png
200 OK 8.7 kB URL GET HTTP/2 d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/54c4288e-path-86243.png
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type PNG image data, 756 x 472, 8-bit colormap, non-interlaced\012- data
Hash b46817aaff543320f1dfced01f1bf317
a8ed4429ed7662c921e77cdabf81cc026f0aef2d
2e4ff24b2cc9a14eac4ef36c66c7a73395e46173d53886fcc5e7bfa7c6493559
GET /register.fxtm.info/switchers/54c4288e-path-86243.png HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 8668
date: Sat, 29 Jul 2023 11:58:08 GMT
last-modified: Wed, 29 Mar 2023 08:41:45 GMT
etag: "b46817aaff543320f1dfced01f1bf317"
x-amz-server-side-encryption: AES256
cache-control: max-age=31557600
x-amz-version-id: UJXTIkfxLOaKf7Eko7xHeHz23VmTIOA_
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: dIfOlr6IvrJWCfO57CdihQ3X7JOdUVpmP0nvAxauZqAkz1HOMKs68w==
age: 702494
X-Firefox-Spdy: h2
data.fxtm.info/_set_cookie?val=kx9hRv%2BuVApWoAShda47rkUVSI8AbF%2FBE30%2FrrgPQgARhQh%2BfJowA0tv1lD3bVnVVexdsTDvLCTwrhjg%2BJgQyZlVCK9PokoQdNtW3KpUk8Bb5E8VvMZkYldRgkyFHteUrIZUca%2FDuxClTIOmVIQpzZxkVB7xmTMHrEjwB1xm7%2FozibHKmWe%2FQ8Ds7g%3D%3D
200 OK 0 B URL GET HTTP/2 data.fxtm.info/_set_cookie?val=kx9hRv%2BuVApWoAShda47rkUVSI8AbF%2FBE30%2FrrgPQgARhQh%2BfJowA0tv1lD3bVnVVexdsTDvLCTwrhjg%2BJgQyZlVCK9PokoQdNtW3KpUk8Bb5E8VvMZkYldRgkyFHteUrIZUca%2FDuxClTIOmVIQpzZxkVB7xmTMHrEjwB1xm7%2FozibHKmWe%2FQ8Ds7g%3D%3D
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerGoogle Trust Services LLC
Subjectdata.fxtm.info
FingerprintE1:59:62:CE:7A:D7:20:1A:B6:B3:01:27:C7:83:81:30:66:2D:B7:48
ValidityThu, 20 Jul 2023 13:32:08 GMT - Wed, 18 Oct 2023 14:18:17 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_set_cookie?val=kx9hRv%2BuVApWoAShda47rkUVSI8AbF%2FBE30%2FrrgPQgARhQh%2BfJowA0tv1lD3bVnVVexdsTDvLCTwrhjg%2BJgQyZlVCK9PokoQdNtW3KpUk8Bb5E8VvMZkYldRgkyFHteUrIZUca%2FDuxClTIOmVIQpzZxkVB7xmTMHrEjwB1xm7%2FozibHKmWe%2FQ8Ds7g%3D%3D HTTP/1.1
Host: data.fxtm.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Cookie: ubvt=v2%7C1b34664a-636c-4b65-851d-e4924b46917d%7Ce99e679d-5417-4190-b4ce-cd61fd09315e%3Aa%3Asingle; _gcl_au=1.1.595871492.1691334378; _rdt_uuid=1691334378315.ec58d21b-21e3-4e37-97be-c941ef917431; _ga_Z7G2DXPR5E=GS1.1.1691334378.1.0.1691334378.0.0.0; _ga=GA1.1.1652822685.1691334378; FPLC=4THOxXLEv4pV8egjHBDAVkim6qpsIJhFeLUPOamyAg9BoySfL1BQhr%2F0cPmvYSqYQ%2FkcmoFOV%2FPCbbQ%2FEGGBUG57nlN%2FOFD%2BqrE4kAScq0GSEtHECQ7fNudu8Gq3wg%3D%3D; FPID=FPID2.2.TIIqiEj9c%2BKXwR%2FV%2B%2FQvEw5jlWXSxZ64Z8q4aF8JP%2Bw%3D.1691334378; FPAU=1.1.595871492.1691334378; _cq_duid=1.1691334378.ksdIztKOrBE8f2Ga; _cq_suid=1.1691334378.3RMvLRT2YdLU1ZSi
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
set-cookie: _ga=GA1.1.1652822685.1691334378; Max-Age=63072000; Domain=fxtm.info; Path=/; SameSite=Lax; Secure
content-type: image/gif
date: Sun, 06 Aug 2023 15:06:20 GMT
server: Google Frontend
expires: Sun, 06 Aug 2023 15:06:20 GMT
cache-control: private
X-Firefox-Spdy: h2
data.fxtm.info/g/collect?v=2&tid=G-Z7G2DXPR5E>m=45he3820&_p=1617848251&cid=1652822685.1691334378&ul=en-us&sr=1280x1024&sst.uc=&sst.gse=1&_s=3&sid=1691334378&sct=1&seg=0&dl=https%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F&dt=FXTM%20Gives%20You%20More%20For%20Less&en=reg_form_field_validated&ep.Page%20Hostname=register.fxtm.info&ep.Page%20Path=%2Fswitchers%2F&ep.Page%20URL=https%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F&ep.Referrer=&ep.Is%20Unbounce%3F=true&ep.content_group=Unallocated&ep.GTM%20SS%20Domain=https%3A%2F%2Fdata.fxtm.info&ep.Domain%20Region=global&ep.document_referrer=&ep.gtm_debug_mode=false&ep.timestamp=2023-08-06T15%3A06%3A19.403%2B00%3A00&ep.gtm_version=113&ep.domain_region=global&ep.field_name=countryOfResidence&ep.step=1%2F7&ep.user_data._tag_mode=CODE&richsstsse
200 OK 65 B URL GET HTTP/2 data.fxtm.info/g/collect?v=2&tid=G-Z7G2DXPR5E>m=45he3820&_p=1617848251&cid=1652822685.1691334378&ul=en-us&sr=1280x1024&sst.uc=&sst.gse=1&_s=3&sid=1691334378&sct=1&seg=0&dl=https%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F&dt=FXTM%20Gives%20You%20More%20For%20Less&en=reg_form_field_validated&ep.Page%20Hostname=register.fxtm.info&ep.Page%20Path=%2Fswitchers%2F&ep.Page%20URL=https%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F&ep.Referrer=&ep.Is%20Unbounce%3F=true&ep.content_group=Unallocated&ep.GTM%20SS%20Domain=https%3A%2F%2Fdata.fxtm.info&ep.Domain%20Region=global&ep.document_referrer=&ep.gtm_debug_mode=false&ep.timestamp=2023-08-06T15%3A06%3A19.403%2B00%3A00&ep.gtm_version=113&ep.domain_region=global&ep.field_name=countryOfResidence&ep.step=1%2F7&ep.user_data._tag_mode=CODE&richsstsse
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerGoogle Trust Services LLC
Subjectdata.fxtm.info
FingerprintE1:59:62:CE:7A:D7:20:1A:B6:B3:01:27:C7:83:81:30:66:2D:B7:48
ValidityThu, 20 Jul 2023 13:32:08 GMT - Wed, 18 Oct 2023 14:18:17 GMT
File type ASCII text, with no line terminators
Hash 09e2b0b335a8a3fe7af59bc95afb7805
ce618c52e5e3e2e4d0151e76c21f4df73d1ee9c5
ad1d4f9f8632a757694e89ac2387e5719b475b295a228ed119e49a809f86f476
GET /g/collect?v=2&tid=G-Z7G2DXPR5E>m=45he3820&_p=1617848251&cid=1652822685.1691334378&ul=en-us&sr=1280x1024&sst.uc=&sst.gse=1&_s=3&sid=1691334378&sct=1&seg=0&dl=https%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F&dt=FXTM%20Gives%20You%20More%20For%20Less&en=reg_form_field_validated&ep.Page%20Hostname=register.fxtm.info&ep.Page%20Path=%2Fswitchers%2F&ep.Page%20URL=https%3A%2F%2Fregister.fxtm.info%2Fswitchers%2F&ep.Referrer=&ep.Is%20Unbounce%3F=true&ep.content_group=Unallocated&ep.GTM%20SS%20Domain=https%3A%2F%2Fdata.fxtm.info&ep.Domain%20Region=global&ep.document_referrer=&ep.gtm_debug_mode=false&ep.timestamp=2023-08-06T15%3A06%3A19.403%2B00%3A00&ep.gtm_version=113&ep.domain_region=global&ep.field_name=countryOfResidence&ep.step=1%2F7&ep.user_data._tag_mode=CODE&richsstsse HTTP/1.1
Host: data.fxtm.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://register.fxtm.info
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Cookie: ubvt=v2%7C1b34664a-636c-4b65-851d-e4924b46917d%7Ce99e679d-5417-4190-b4ce-cd61fd09315e%3Aa%3Asingle; _gcl_au=1.1.595871492.1691334378; _rdt_uuid=1691334378315.ec58d21b-21e3-4e37-97be-c941ef917431; _ga_Z7G2DXPR5E=GS1.1.1691334378.1.0.1691334379.0.0.0; _ga=GA1.1.1652822685.1691334378; FPLC=sCm8Xz8ZxrcM%2FYvrrr9gDCtJR0QwAFL0mm7A6fnEEB75gXdbAmqt23uiVRyxYGczq4Fk5emT5v4%2FzVDLBAGsoPMH3JrwBRCvLO2%2Flc9YYvdOCUr%2Fu%2F2s%2BkxlAAfppg%3D%3D; FPID=FPID2.2.TIIqiEj9c%2BKXwR%2FV%2B%2FQvEw5jlWXSxZ64Z8q4aF8JP%2Bw%3D.1691334378; FPAU=1.1.595871492.1691334378; _cq_duid=1.1691334378.ksdIztKOrBE8f2Ga; _cq_suid=1.1691334378.3RMvLRT2YdLU1ZSi; _ga_backup=GA1.1.1652822685.1691334378; _uetsid=ce1b4880346a11eeb88b499c858a4f82; _uetvid=ce1b65b0346a11ee9c0887c28bca83c5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
set-cookie: FPID=FPID2.2.TIIqiEj9c%2BKXwR%2FV%2B%2FQvEw5jlWXSxZ64Z8q4aF8JP%2Bw%3D.1691334378; Max-Age=63072000; Domain=fxtm.info; Path=/; Secure; HttpOnly
FPAU=1.1.595871492.1691334378; Max-Age=7775992; Domain=fxtm.info; Path=/; Secure
cache-control: no-cache
content-type: text/plain
x-content-type-options: nosniff
x-accel-buffering: no
access-control-allow-origin: https://register.fxtm.info
access-control-allow-credentials: true
date: Sun, 06 Aug 2023 15:06:26 GMT
server: Google Frontend
expires: Sun, 06 Aug 2023 15:06:26 GMT
X-Firefox-Spdy: h2
my.forextime.com/en/identity/registration/assets/main.0388808a3231234dee65.js?0388808a3231234dee65
200 OK 614 kB URL GET HTTP/3 my.forextime.com/en/identity/registration/assets/main.0388808a3231234dee65.js?0388808a3231234dee65
IP
Requested by https://my.forextime.com/en/identity/registration/?theme=&sbt=&abt=&lbt=&sw=&cs=&dlt=&product=trading&origin=https%3A%2F%2Fregister.fxtm.info¤t_url=https://register.fxtm.info/&company=&version=49007&type=new&new-gtm=&disable_web_analytic=true
Certificate IssuerCentralNic Luxembourg Sàrl
Subject*.forextime.com
FingerprintD0:E4:5A:3F:40:96:1E:77:78:0E:76:1C:F2:44:08:B4:CD:B4:2F:91
ValidityFri, 18 Nov 2022 00:00:00 GMT - Sun, 10 Dec 2023 23:59:59 GMT
Size 614 kB (614511 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /en/identity/registration/assets/main.0388808a3231234dee65.js?0388808a3231234dee65 HTTP/1.1
Host: my.forextime.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://my.forextime.com/en/identity/registration/?theme=&sbt=&abt=&lbt=&sw=&cs=&dlt=&product=trading&origin=https%3A%2F%2Fregister.fxtm.info¤t_url=https://register.fxtm.info/&company=&version=49007&type=new&new-gtm=&disable_web_analytic=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 06 Aug 2023 15:06:20 GMT
content-type: application/javascript
last-modified: Fri, 04 Aug 2023 08:25:33 GMT
etag: W/"64ccb5fd-9606f"
my-country: NO
content-encoding: gzip
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000
server: cloudflare
cf-ray: 7f282ee40f6db4f1-OSL
alt-svc: h3=":443"; ma=86400
my.forextime.com/en/identity/registration/assets/img/tooltip.svg
200 OK 575 B URL GET HTTP/3 my.forextime.com/en/identity/registration/assets/img/tooltip.svg
IP
Requested by https://my.forextime.com/en/identity/registration/?theme=&sbt=&abt=&lbt=&sw=&cs=&dlt=&product=trading&origin=https%3A%2F%2Fregister.fxtm.info¤t_url=https://register.fxtm.info/&company=&version=49007&type=new&new-gtm=&disable_web_analytic=true
Certificate IssuerCentralNic Luxembourg Sàrl
Subject*.forextime.com
FingerprintD0:E4:5A:3F:40:96:1E:77:78:0E:76:1C:F2:44:08:B4:CD:B4:2F:91
ValidityFri, 18 Nov 2022 00:00:00 GMT - Sun, 10 Dec 2023 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (591), with no line terminators
Hash d3bf8011d32d5c23ebe62a171136b0fe
9259a464251b409aadc51509e2889a3ec864ea84
7a8c1f9fcb432dd99cdebe693da2b1bb437c5dde427278244c5bd33461bc4e2a
GET /en/identity/registration/assets/img/tooltip.svg HTTP/1.1
Host: my.forextime.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://my.forextime.com/en/identity/registration/assets/fxLight.g6l4yjyb7tpqxz9qey5jk.css
Cookie: isUnbounceDomain=true; isAllowedDomain=false; company=uk; currentWWWUrl=https://register.fxtm.info/; language=en; origin=https://register.fxtm.info; topUrl=https://register.fxtm.info/; redirect=; redirect_auth=/; redirect_login=; product=trading; country=NO
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 06 Aug 2023 15:06:20 GMT
content-type: image/svg+xml
last-modified: Fri, 04 Aug 2023 08:25:33 GMT
etag: W/"64ccb5fd-23f"
my-country: NO
content-encoding: gzip
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000
server: cloudflare
cf-ray: 7f282ee8bd36b4f1-OSL
alt-svc: h3=":443"; ma=86400
d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/8a892a5f-icons-33.svg
200 OK 2.2 kB URL GET HTTP/2 d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/8a892a5f-icons-33.svg
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- XML document, ASCII text, with very long lines (2252), with no line terminators
Hash cdc02e6f62917e57cefff3f9ad80018a
2d770ac050079a5f7d2f1977bf21719f03ce721b
1e6437900a5ad907973b63c8059ad1dee33e4ec993b3fc1c7eb4d7b7abd32ba2
GET /register.fxtm.info/switchers/8a892a5f-icons-33.svg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
date: Thu, 27 Jul 2023 00:43:24 GMT
last-modified: Wed, 29 Mar 2023 08:41:45 GMT
etag: W/"2f156431509534bb8628b584b875728e"
x-amz-server-side-encryption: AES256
cache-control: max-age=31557600
x-amz-version-id: SLBbX6M6vYUW12MAgOPslSwfwZes4RzP
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: mGsITafW2SFjX-VbrE4aJkGtlZ7d1JhM96nb51GDLIwo0fYRH9P6xQ==
age: 915777
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/f78b46e3-twitter.svg
200 OK 1.4 kB URL GET HTTP/2 d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/f78b46e3-twitter.svg
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- XML document, ASCII text, with very long lines (1475), with no line terminators
Hash 1eb1d64b81c9a540f118182b5c486408
e772cd32c0d339f4324d359e831223eefcac19b0
3217dae6db196cbc4f6cd9a7eca78e4a8eaa24598a0aa6ccace76df9ddddf30e
GET /register.fxtm.info/switchers/f78b46e3-twitter.svg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
date: Sun, 09 Jul 2023 08:26:35 GMT
last-modified: Wed, 29 Mar 2023 08:41:45 GMT
etag: W/"b32aa29532e90254797bf6a134055734"
x-amz-server-side-encryption: AES256
cache-control: max-age=31557600
x-amz-version-id: 8LTDwRtD1cUuvNB1G_SNGhZTTHW4zSZh
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5uOcezdwdNtphmUo6xHQF-5WIOqDnBHv62nf8Y1KICnMY5aveQuRvg==
age: 2443187
X-Firefox-Spdy: h2
i5rwkk4h.micpn.com/p/js/1.js
200 OK 45 kB URL GET HTTP/2 i5rwkk4h.micpn.com/p/js/1.js
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerAmazon
Subject*.micpn.com
FingerprintA0:F5:55:7A:A7:CB:6E:94:FE:E9:4F:6C:FA:DB:EC:48:EB:36:F0:AD
ValidityWed, 01 Mar 2023 00:00:00 GMT - Fri, 16 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p/js/1.js HTTP/1.1
Host: i5rwkk4h.micpn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript
x-uuid: 34549d28-3352-411f-afd9-2b9d1760b644
cache-control: no-cache max-age=0
expires: Thu, 01 Dec 1994 16:00:00 GMT
pragma: no-cache
p3p: policyref="https://movableink.com/w3c/p3p.xml", CP="DEVa PSAa PSDa IVAa IVDa OUR IND DSP NON COR NAV UNI"
timing-allow-origin: https://register.fxtm.info
date: Sun, 06 Aug 2023 14:59:18 GMT
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 0ekPHG3rP0J68rdF0654Qe7zH4QaBW9RHxOKqgqQL4Qp8MJgxL_77A==
age: 425
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/80b09beb-icon-secure.svg
200 OK 5.6 kB URL GET HTTP/2 d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/80b09beb-icon-secure.svg
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- XML document text\012- HTML document, ASCII text, with very long lines (5872), with no line terminators
Hash 23cbd55eb9ebbcd86dc19e7b0000654d
3f4e8edd14c6026f703efc5f74a9355a90bbd4e1
c6be77bc4ab421d4fa631521b3b1e7deed8efe3eee68b9e4093c52bba1b47894
GET /register.fxtm.info/switchers/80b09beb-icon-secure.svg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
date: Thu, 27 Jul 2023 00:43:27 GMT
last-modified: Wed, 29 Mar 2023 08:41:45 GMT
etag: W/"0f976db73a1b525b2eac4217c04dafa2"
x-amz-server-side-encryption: AES256
cache-control: max-age=31557600
x-amz-version-id: 82SeeOkFWBMrcSYG9VWolzh8YNchpZx7
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 9FuQb64ejjHaVy3EkRFoHf90ojxeEPstHxcyomohHwPdiCe4GAC7mw==
age: 915775
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/2ed5a3b2-icon-call.svg
200 OK 664 B URL GET HTTP/2 d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/2ed5a3b2-icon-call.svg
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- XML document, ASCII text, with very long lines (697), with no line terminators
Hash bf9b27d5e31dc2ccf60fbe6e048b824c
b30816cb57256f03f5e5bb8118ae0630ca44f13f
a7092c4a8e0b1c9b0716e1dae4c544399e9a3087d5243fea1fb1ed19e0a1decc
GET /register.fxtm.info/switchers/2ed5a3b2-icon-call.svg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 664
date: Mon, 17 Jul 2023 02:22:57 GMT
last-modified: Wed, 29 Mar 2023 08:41:45 GMT
etag: "e05306e42b2ecda001c03b424167e1aa"
x-amz-server-side-encryption: AES256
cache-control: max-age=31557600
x-amz-version-id: vmnuf_viBv82p_TfUPe1OycTpmfrD5HQ
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: j6wofQAiW2ZikQnnT0BMVJTM8BR0LfP3atQ6q5YPsSIu5r2WkCp3CA==
age: 1773805
X-Firefox-Spdy: h2
obs.cheqzone.com/tracker/tc_imp.gif?e=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&cri=B2bxpRjVle&ts=584&cb=1691334379365
200 OK 43 B URL GET HTTP/2 obs.cheqzone.com/tracker/tc_imp.gif?e=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&cri=B2bxpRjVle&ts=584&cb=1691334379365
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerZeroSSL
Subject*.cheqzone.com
Fingerprint4D:4A:D9:B4:B5:55:F4:2A:51:11:82:01:09:49:2A:82:E6:0B:44:A5
ValidityWed, 28 Jun 2023 00:00:00 GMT - Tue, 26 Sep 2023 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash db04c7b378cb2db912c3ba8a5a774ee3
dee34bd86c3484d31002182aa2b7caa4699126b8
98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
GET /tracker/tc_imp.gif?e=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&cri=B2bxpRjVle&ts=584&cb=1691334379365 HTTP/1.1
Host: obs.cheqzone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Cookie: cg_uuid=c7d5cfb2b509a83ec861673f853ef4ea
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
date: Sun, 06 Aug 2023 15:06:21 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 43
X-Firefox-Spdy: h2
d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/b3153b37-fxtm-logo-gives-you-more.svg
200 OK 7.6 kB URL GET HTTP/2 d9hhrg4mnvzow.cloudfront.net/register.fxtm.info/switchers/b3153b37-fxtm-logo-gives-you-more.svg
IP
Requested by https://register.fxtm.info/switchers/
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintBA:0F:CD:B3:EA:19:B2:9D:99:9B:51:2D:16:33:6B:D0:3F:31:A2:AB
ValidityThu, 08 Dec 2022 00:00:00 GMT - Thu, 07 Dec 2023 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- XML document text\012- HTML document, ASCII text, with very long lines (7876), with no line terminators
Hash 047de03d4eec305508220f3d231240dd
caee829ad2e85e4ecb0de33802561acb535bf735
34e436b1784ddf5bc703293a45f982b0d8937414be1afb4710eccf94e4cc4bac
GET /register.fxtm.info/switchers/b3153b37-fxtm-logo-gives-you-more.svg HTTP/1.1
Host: d9hhrg4mnvzow.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://register.fxtm.info/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
date: Mon, 17 Jul 2023 02:22:59 GMT
last-modified: Wed, 29 Mar 2023 08:41:45 GMT
etag: W/"21096ad9de50324cc862d3433f6878bb"
x-amz-server-side-encryption: AES256
cache-control: max-age=31557600
x-amz-version-id: SRz47YrkXWqc_FYkYEIFUmbMZGGdXcCp
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: j23_gt4IsJ99Xg14s556yp-HE9HHBftsiZmc5_6gY5WwWj2LmwNtpA==
age: 1773803
X-Firefox-Spdy: h2
my.forextime.com/en/identity/registration/assets/fonts/sourceSansPro.css
200 OK 785 B URL GET HTTP/3 my.forextime.com/en/identity/registration/assets/fonts/sourceSansPro.css
IP
Requested by https://my.forextime.com/en/identity/registration/?theme=&sbt=&abt=&lbt=&sw=&cs=&dlt=&product=trading&origin=https%3A%2F%2Fregister.fxtm.info¤t_url=https://register.fxtm.info/&company=&version=49007&type=new&new-gtm=&disable_web_analytic=true
Certificate IssuerCentralNic Luxembourg Sàrl
Subject*.forextime.com
FingerprintD0:E4:5A:3F:40:96:1E:77:78:0E:76:1C:F2:44:08:B4:CD:B4:2F:91
ValidityFri, 18 Nov 2022 00:00:00 GMT - Sun, 10 Dec 2023 23:59:59 GMT
File type ASCII text, with very long lines (808), with no line terminators
Hash 1433e8ad229f80414fb966bcac64f3c5
4f61ad897ad3f9b3e637fa6048ab857aab5ca6b1
76bbba645f08b3803b24ff26d3e5282cad8682ca26a1e2ee1488bb0bd6236ebf
GET /en/identity/registration/assets/fonts/sourceSansPro.css HTTP/1.1
Host: my.forextime.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://my.forextime.com/en/identity/registration/?theme=&sbt=&abt=&lbt=&sw=&cs=&dlt=&product=trading&origin=https%3A%2F%2Fregister.fxtm.info¤t_url=https://register.fxtm.info/&company=&version=49007&type=new&new-gtm=&disable_web_analytic=true
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 06 Aug 2023 15:06:20 GMT
content-type: text/css
last-modified: Fri, 04 Aug 2023 08:25:33 GMT
etag: W/"64ccb5fd-311"
my-country: NO
content-encoding: gzip
cf-cache-status: DYNAMIC
strict-transport-security: max-age=31536000
server: cloudflare
cf-ray: 7f282ee40f6bb4f1-OSL
alt-svc: h3=":443"; ma=86400
3.126.202.50
151.139.128.10
151.101.85.230
65.21.225.209
54.77.135.175
104.18.231.99
0.0.0.0